CN111385191A - Vehicle-mounted interconnected gateway, vehicle OTA upgrading system and method and computer storage medium - Google Patents

Vehicle-mounted interconnected gateway, vehicle OTA upgrading system and method and computer storage medium Download PDF

Info

Publication number
CN111385191A
CN111385191A CN201811627066.8A CN201811627066A CN111385191A CN 111385191 A CN111385191 A CN 111385191A CN 201811627066 A CN201811627066 A CN 201811627066A CN 111385191 A CN111385191 A CN 111385191A
Authority
CN
China
Prior art keywords
vehicle
refreshing
upgrade
refresh
controller
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201811627066.8A
Other languages
Chinese (zh)
Other versions
CN111385191B (en
Inventor
林旺城
范晓云
龚启伟
杨尚咏
徐潇
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
United Automotive Electronic Systems Co Ltd
Original Assignee
United Automotive Electronic Systems Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by United Automotive Electronic Systems Co Ltd filed Critical United Automotive Electronic Systems Co Ltd
Priority to CN201811627066.8A priority Critical patent/CN111385191B/en
Publication of CN111385191A publication Critical patent/CN111385191A/en
Application granted granted Critical
Publication of CN111385191B publication Critical patent/CN111385191B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/66—Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08—Configuration management of networks or network elements
    • H04L41/0803—Configuration setting
    • H04L41/0813—Configuration setting characterised by the conditions triggering a change of settings
    • H04L41/082—Configuration setting characterised by the conditions triggering a change of settings the condition being updates or upgrades of network functionality
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/34—Network arrangements or protocols for supporting network services or applications involving the movement of software or configuration parameters 

Abstract

The invention provides a vehicle-mounted interconnection gateway, a vehicle OTA upgrading system, a vehicle OTA upgrading method, a computer storage medium and a vehicle, which CAN realize a one-stop OTA refreshing scheme by utilizing the vehicle-mounted interconnection gateway, CAN finish the upgrading and refreshing of an intelligent controller on the vehicle, CAN finish the upgrading and refreshing of non-intelligent controllers of all CAN subnets, and CAN also finish all OTA control strategies inside the vehicle-mounted interconnection gateway, thereby forming a uniform refreshing strategy and a file format, and enabling a whole vehicle factory to unify vehicle OTA upgrading and refreshing schemes of different vehicle types and different configurations; furthermore, a more deeply customized vehicle OTA upgrading and refreshing scheme can be provided, such as the independent refreshing, refreshing sequence configuration, multi-subnet parallel refreshing and the like of each module of each controller can be realized.

Description

Vehicle-mounted interconnected gateway, vehicle OTA upgrading system and method and computer storage medium
Technical Field
The invention relates to the technical field of automobile communication, in particular to a vehicle-mounted interconnection gateway, a vehicle OTA upgrading system, a vehicle OTA upgrading method, a computer storage medium and a vehicle.
Background
With the progress of society, automobiles become almost necessary transportation means for each family, so that the life of people is more and more convenient. Furthermore, with the development of advanced technologies in the automotive field, more and more intelligent devices and functions are integrated into the automobile, and these devices and functions are usually controlled by a corresponding ECU (Electronic Control Unit), and according to statistics, an average number of 30 ECUs is included in a current ordinary household automobile, and each ECU usually includes a Control module and a storage module, and the storage module is used for storing software, parameters and the like of the devices or functions related to the ECU. However, as the automobile intelligence is continuously improved, the requirements of people on the functions and the performance of each system of the automobile are also continuously improved, the software of the vehicle-mounted electronic equipment is increasingly complex, the probability of software problems is correspondingly increased, the potential of the vehicle-mounted electronic equipment can be further developed by upgrading the software, the requirements of people are met, the software problems are repaired, the operation safety of the automobile and the normal use of each function are ensured, and therefore, automobile developers often need to upgrade the software of delivered automobiles produced by the automobile developers.
In the conventional method, the automobile needs to be sent to a dealer or a repair shop, a professional maintenance worker uses a professional testing instrument to detect the running state of the automobile, and then updated contents are written in through a special physical interface on the automobile, so that the software on the corresponding component is updated. Taking updating the firmware On the ECU in the automobile as an example, a professional maintenance worker needs to write corresponding update contents through an On Board Diagnostics (OBD) interface On the automobile, so as to update the firmware On the ECU. Obviously, the traditional mode needs professional maintenance personnel to participate, has certain limitation, and has tedious updating process and low efficiency.
With The advancement of Technology, The OTA Technology (Over The Air Technology, i.e. Over-The-Air system upgrading Technology or Over-The-Air downloading Technology) can upgrade and refresh The corresponding ECUs on The vehicle without The need of The customer to go to The dealer or repair shop, so that The user can have better experience, and The cost is lower for The vehicle developer, and thus The Technology gradually becomes The trend of software upgrading of The vehicle-mounted electronic device.
Referring to fig. 1, in The current OTA upgrade and refresh method, The cloud upgrade platform transmits an upgrade package FOTA (Firmware Over-The-Air) to a vehicle-mounted vehicle networking terminal T-BOX (telematics BOX) of an automobile in a remote secure link manner, The vehicle networking client of The T-BOX analyzes (for example, decrypts and checks) and then transmits The result to electronic devices with intelligent controllers (i.e., intelligent ECUs) such as a vehicle HU (head unit), a vehicle dashboard IPC (intelligent Panel cluster) of The automobile through a USB or an Ethernet (ETH), and simultaneously transmits The result to a gateway GW (gateway) through a controller area network bus CAN1, and The gateway client of The gateway GW performs processing and analysis of upgrade information and specific upgrade steps through respective intelligent ECUs of The electronic devices such as The vehicle HU and The vehicle dashboard IPC, and simultaneously transmits The upgrade information to a body controller (bcm) module via controller area network buses 2, 3 …, and The like, An electronic device system having a conventional controller (i.e., a non-intelligent ECU) such as a tail gate controller (tgc), a battery Management system (bms), and an engine Management system (ems) is provided to upgrade the non-intelligent ECU. Such an upgrade method has many problems, and specifically includes:
1. according to the OTA upgrading scheme, a mode of cooperation of multiple main nodes such as T-BOX, GW, BCM, TGC, BMS and EMS is adopted, the communication link is long, the number of interactions among the main nodes is large, the data protection capability is poor, and the development period is long;
2. the OTA upgrading scheme is generally completed by combining a plurality of suppliers, so that a unified strategy and a data format are difficult to form, and the strategy development is often required to be customized again when the vehicle type or the vehicle configuration is changed;
3. the OTA upgrading scheme usually only has the processing capacity of a cloud and an intelligent controller (namely, an ECU with an intelligent operating system such as Linux, and the like, and is called an intelligent ECU for short), and the OTA upgrading and refreshing of the traditional controller on the automobile (namely, the ECU with an embedded real-time operating system, and is called a non-intelligent ECU for short) generally needs cross-domain cooperation to form complete OTA service, and has more interaction and cannot form integral advantages;
4. the OTA upgrading scheme can not carry out deep customization on upgrading and refreshing of each ECU, such as refreshing sequence judgment, ECU module level refreshing control, refreshing failure processing, rollback strategies and the like.
Disclosure of Invention
The invention aims to provide a vehicle-mounted interconnected gateway, a vehicle OTA upgrading system, a vehicle OTA upgrading method, a computer storage medium and a vehicle, which can shorten a communication link, reduce interaction between main nodes and finish refreshing of an intelligent controller and a traditional controller on the vehicle.
In order to achieve the above object, the present invention provides a vehicle-mounted internet gateway installed on a vehicle, comprising:
the system comprises a microprocessor, a first updating module, a second updating module and a third updating module, wherein the microprocessor is configured to interact with a cloud end to receive an updating package sent by the cloud end, analyze first updating refreshing data and second updating refreshing data from the updating package, and update and refresh an intelligent controller on the vehicle according to the first updating refreshing data, the first updating refreshing data is used for updating and refreshing the intelligent controller on the vehicle, and the second updating refreshing data is used for updating and refreshing a non-intelligent controller on the vehicle;
and the microcontroller is configured to be in communication connection with the microprocessor and is triggered by the microprocessor when the microprocessor analyzes the second upgrading and refreshing data, so that the non-intelligent controller on the vehicle is upgraded and refreshed according to the second upgrading and refreshing data sent by the microprocessor.
Optionally, the microprocessor comprises:
a cloud interaction module configured to establish a secure communication link with the cloud to download the upgrade package from the cloud;
the file analysis module is configured to analyze the upgrade package to analyze first upgrade refresh data used for upgrading and refreshing an intelligent controller on the vehicle and second upgrade refresh data used for upgrading and refreshing a non-intelligent controller on the vehicle from the upgrade package;
a smart controller client module configured to communicatively couple with a smart controller on the vehicle to upgrade and refresh the smart controller on the vehicle according to the first upgrade refresh data; and the number of the first and second groups,
and the communication server module is configured to be in communication connection with the microcontroller through a communication bus, trigger the microcontroller when the second upgrade refresh data is analyzed by the file analysis module, and issue the second upgrade refresh data to the microcontroller.
Optionally, the file parsing module is further configured to perform file parsing on the upgrade package, and convert a file including the first upgrade update data and the second upgrade update data parsed from the upgrade package into a uniform file format.
Optionally, the unified file format includes four types of files, namely an upgrade package configuration file for describing a requirement of performing OTA refresh on the vehicle, a controller refresh configuration file for describing refresh information of each of the intelligent controllers and the non-intelligent controllers, an original data refresh file for refreshing each of the intelligent controllers and the non-intelligent controllers, and a differential data refresh file; the upgrading package configuration file comprises the number of controllers needing to be refreshed on the vehicle, basic refreshing information and verification information of the whole refreshing package; the controller refresh configuration file comprises the number of files, address ranges, safety algorithm information and verification method information which need to be refreshed specifically by a certain intelligent controller or the non-intelligent controller; the original data refreshing file and the differential data refreshing file both comprise file headers and file contents, and the file headers are used for describing version information and verification information of the file contents.
Optionally, the file parsing module is further configured to: storing the four types of files in a local embedded multimedia memory of the vehicle, keeping encryption on all the four types of files in a full life cycle, and storing the encrypted information in the microprocessor and the microcontroller in a crossed manner to realize mutual verification; the smart controller client or the microcontroller is further configured to: and when the upgrading and refreshing of a certain controller of the vehicle is triggered, dynamically decrypting the four types of files corresponding to the controller and temporarily storing the files, and when the vehicle-mounted internet gateway is powered off, clearing all dynamically decrypted data.
Optionally, the file parsing module is further configured to: configuring different encryption and verification modes for the four types of files during each refreshing, wherein the controller refreshing configuration file converted during each refreshing comprises corresponding module division information of the intelligent controller or the non-intelligent controller; the smart controller client module is further configured to: and performing module-level upgrade and refresh on the module needing upgrade and refresh in the intelligent controller according to the software version of each module of the intelligent controller updated and refreshed in the previous time and the four files converted from the first upgrade and refresh data in the upgrade package of the current time by the file analysis module.
Optionally, the controller refresh configuration file includes a number of attempts to upgrade refresh; the smart controller client module is further configured to: when upgrading and refreshing one intelligent controller fails, restarting a refreshing process of the intelligent controller according to the number of attempts of configuration in the controller refreshing configuration file corresponding to the intelligent controller, and further attempting to refresh the software version of the intelligent controller back to the software version when the upgrading and refreshing are successful last time after all attempts of the number of attempts fail.
Optionally, the smart controller client module is further configured to: and acquiring the dependency relationship among the intelligent controllers on the vehicle, determining the refreshing sequence of the intelligent controllers according to the dependency relationship, and upgrading and refreshing the corresponding intelligent controllers according to the refreshing sequence.
Optionally, the data analyzed from the upgrade package by the file analysis module further includes third upgrade refresh data for performing upgrade refresh on the vehicle-mounted internet gateway; the microprocessor further includes a self-upgrade module configured to upgrade and refresh the microcontroller and the microprocessor itself according to the third upgrade refresh data when the file parsing module parses the third upgrade refresh data from the upgrade package.
Optionally, the microprocessor is a dual-backup system having a main system and a backup system, and the main system is configured to upgrade and refresh the intelligent controller on the vehicle first, and then upgrade and refresh the microcontroller and the backup system; and the backup system is used for upgrading and refreshing the main system of the microprocessor when the vehicle-mounted internet gateway is restarted.
Optionally, the microcontroller comprises:
the communication client module is configured to be in communication connection with the communication server module through a communication bus so as to receive the second upgrading and refreshing data sent by the communication server module and feed back the upgrading and refreshing progress of the non-intelligent controller to the communication server module; and the number of the first and second groups,
and the traditional controller management module is configured to be in communication connection with each non-intelligent controller on the vehicle, upgrade and refresh the corresponding non-intelligent controller according to the second upgrade and refresh data, and feed back the upgrade and refresh progress of the non-intelligent controller to the communication client module.
Optionally, the legacy controller management module comprises:
a legacy controller client unit configured to receive the second upgrade refresh data and obtain related information for verifying and parsing the second upgrade refresh data, and obtain software version information of a non-intelligent controller on the vehicle, and perform upgrade refresh on the non-intelligent controller on the vehicle according to the second upgrade refresh data, and feed back a progress of the upgrade refresh to the communication client module;
the file verification unit is configured to verify the validity of the second upgrade refresh data issued by the file analysis module according to the related information for verifying the second upgrade refresh data acquired by the traditional controller client unit;
a file parsing unit configured to parse the second upgrade refresh data according to the related information for parsing the second upgrade refresh data, acquired by the legacy controller client unit;
the system comprises a refresh flow control unit, a traditional controller client unit and a file analysis unit, wherein the refresh flow control unit is configured to obtain a dependency relationship between non-intelligent controllers on the vehicle through the traditional controller client unit and determine a refresh sequence of the non-intelligent controllers according to the dependency relationship, and the traditional controller client unit is further configured to update and refresh the non-intelligent controllers on the vehicle according to the refresh sequence and data analyzed by the file analysis unit.
Optionally, the microcontroller further comprises:
the hardware security module is configured to encrypt data received and sent out by the microcontroller and map and store encrypted information in the first upgrade refresh data and the second upgrade refresh data; and the number of the first and second groups,
and the starting loading module is configured to perform upgrading and refreshing on the microcontroller according to third upgrading and refreshing data when the third upgrading and refreshing data used for performing upgrading and refreshing on the vehicle-mounted internet gateway is analyzed from the upgrading packet by the file analyzing module.
Optionally, the second upgrade refresh data includes module division information of the non-intelligent controller; the legacy controller client unit is further configured to: and performing module-level upgrading and refreshing on the module needing upgrading and refreshing in the non-intelligent controller according to the software version of each module of the non-intelligent controller on the vehicle, which is updated and refreshed last time, and the analysis result of the file analysis unit on the second upgrading and refreshing data in the upgrading package.
Optionally, the analysis result of the second upgrade updating data in the upgrade package by the file analysis unit includes the number of attempts of the upgrade updating; the legacy controller client unit is further configured to: when the upgrading and refreshing of the non-intelligent controller fails, restarting a refreshing process of the non-intelligent controller according to the number of attempts corresponding to the non-intelligent controller, and further attempting to refresh the software version of the non-intelligent controller back to the software version upgraded and refreshed last time after all attempts of the number of attempts fail.
Optionally, the legacy controller client unit is further configured to perform parallel upgrade and refresh on a plurality of the non-smart controllers on the vehicle, and request the upgrade and refresh data of the non-smart controllers from the microprocessor in real time according to the progress of the upgrade and refresh of the respective non-smart controllers.
Based on the same inventive concept, the invention also provides a vehicle OTA upgrading system, which comprises:
the cloud server is stored with at least one upgrade package;
an intelligent controller and a non-intelligent controller mounted on the vehicle; and the number of the first and second groups,
according to the vehicle-mounted interconnection gateway disclosed by the invention, the vehicle-mounted interconnection gateway is respectively in communication connection with the cloud server and each intelligent controller and the non-intelligent controller.
Based on the same inventive concept, the invention also provides a vehicle OTA upgrading method, which comprises the following steps:
a vehicle-mounted internet gateway establishes communication connection with a cloud end to receive an upgrade package issued by the cloud end;
the vehicle-mounted interconnection gateway analyzes upgrade refresh data used for upgrading and refreshing each controller on a vehicle from the upgrade package, wherein the controller comprises an intelligent controller and a non-intelligent controller, and the upgrade refresh data comprises first upgrade refresh data used for upgrading and refreshing the intelligent controller and second upgrade refresh data used for upgrading and refreshing the non-intelligent controller;
and the vehicle-mounted interconnection gateway upgrades and refreshes the intelligent controller on the vehicle according to the first upgrade and refresh data, and triggers a process of upgrading and refreshing the non-intelligent controller on the vehicle when the second upgrade and refresh data is analyzed, so that the non-intelligent controller on the vehicle is upgraded and refreshed according to the analyzed second upgrade and refresh data.
Optionally, the step of updating, by the vehicle-mounted internet gateway, a certain controller on the vehicle by upgrading includes:
reading a software version of the controller;
judging whether the local vehicle has a backup package corresponding to the software version, if so, downloading the upgrade package from the cloud, and if not, requesting to download the backup package from the cloud;
after the upgrade package is downloaded, judging whether the current environmental condition of the controller meets a refreshing condition, if not, ending exit, if so, triggering a process of upgrading and refreshing the intelligent controller and/or the non-intelligent controller, upgrading and refreshing the controller according to upgrade and refresh data corresponding to the controller analyzed from the upgrade package, when the upgrade and refresh of the current time fails, restarting the process according to trial times configured in the upgrade and refresh data, and when the trial times are all tried but the upgrade and refresh of the controller still fails, further trying to refresh the software version of the controller back to the software version upgraded and refreshed last time.
Optionally, the vehicle OTA upgrading method further includes: and when the vehicle-mounted interconnection gateway finishes upgrading and refreshing all the intelligent controllers and the non-intelligent controllers on the vehicle according to the first upgrading and refreshing data and the second upgrading and refreshing data, judging whether the upgrading and refreshing data analyzed from the upgrading packet has third upgrading and refreshing data used for upgrading and refreshing the vehicle-mounted interconnection gateway, and when the upgrading and refreshing data are not updated, performing self-refreshing according to the third upgrading and refreshing data.
Optionally, the vehicle OTA upgrading method further includes: before upgrading and refreshing the intelligent controller and the non-intelligent controller on the vehicle, the vehicle-mounted interconnection gateway converts first upgrading and refreshing data and second upgrading and refreshing data analyzed from the upgrading packet into a uniform file format.
Optionally, the unified file format includes: the OTA refreshing method comprises four types of files, namely an upgrade package configuration file for describing the requirement of OTA refreshing on the vehicle, a controller refreshing configuration file for describing refreshing information of each controller on the vehicle, an original data refreshing file for refreshing each controller and a differential data refreshing file; the upgrading package configuration file comprises the number of controllers needing to be refreshed on the vehicle, basic refreshing information and verification information of the whole refreshing package; the controller refreshing configuration file comprises the number of files to be refreshed, an address range, safety algorithm information and verification method information of a certain controller; the original data refreshing file and the differential data refreshing file both comprise file headers and file contents, and the file headers are used for describing version information and verification information of the file contents.
Optionally, the vehicle-mounted internet gateway configures the four types of files in different encryption and verification manners, stores the four types of files in a local embedded multimedia memory of the vehicle in the process of upgrading and refreshing an intelligent controller and a non-intelligent controller on the vehicle, keeps encrypting all the four types of files in the whole life cycle, and stores the encrypted information in an internal cross manner to realize mutual verification; when the upgrading and refreshing process of a certain controller of the vehicle is triggered, the four types of files corresponding to the controller are dynamically decrypted and temporarily stored, and when power failure occurs, all dynamically decrypted data are automatically cleared.
Optionally, before upgrading and refreshing the intelligent controller and the non-intelligent controller on the vehicle, the vehicle-mounted interconnection gateway determines a dependency relationship between the controllers on the vehicle, makes a set of dependency algorithm to determine a refreshing sequence between the controllers with the dependency relationship, upgrades and refreshes the controllers with the dependency relationship according to the refreshing sequence, and performs parallel refreshing on the controllers insensitive to the refreshing sequence.
Optionally, in the process of upgrading and refreshing the intelligent controller and the non-intelligent controller on the vehicle, when there is a bus fault or signal interference or a certain controller on the vehicle is incompatible with the upgraded and refreshed version thereof, the vehicle-mounted internet gateway restarts the refresh process of the controller according to the number of attempts configured in the upgrade and refresh data corresponding to the controller, and when all attempts fail, attempts are made to refresh the software version of the controller back to the version which was upgraded and refreshed last time.
Optionally, the vehicle-mounted internet gateway performs module-level upgrade and refresh on the controller according to module division of a certain controller on the vehicle.
Based on the same inventive concept, the invention also provides a computer storage medium, on which a computer program is stored, which, when executed by a processor, implements the vehicle OTA upgrade method according to the invention.
Based on the same inventive concept, the present invention also provides a vehicle, comprising:
a plurality of controllers including an intelligent controller and a non-intelligent controller; and the number of the first and second groups,
according to the vehicle-mounted interconnection gateway, the vehicle-mounted interconnection gateway is interacted with the cloud and is in communication connection with the controllers.
Compared with the prior art, the technical scheme of the invention has the following beneficial effects:
1. the vehicle-mounted interconnection gateway can complete all functions of a plurality of main nodes such as a vehicle-mounted Internet of vehicles terminal T-BOX, a gateway GW and the like in the existing OTA upgrading method, thereby reducing communication links, shielding the details of interaction between the main nodes, increasing the data protection capability and shortening the development period of the OTA upgrading scheme;
2. by adopting the vehicle-mounted interconnection gateway, OTA upgrading and refreshing can be carried out on an intelligent controller on a vehicle, OTA upgrading and refreshing can also be carried out on a non-intelligent controller on the vehicle, and complete OTA service can be formed without cross-domain cooperation;
3. the vehicle-mounted interconnection gateway is adopted as a main node, and all sub-networks of the vehicle networking (namely all intelligent controllers and non-intelligent controllers on the vehicle) can be refreshed in parallel, so that the refreshing time is reduced;
4. a uniform OTA upgrading and refreshing strategy can be formed through the vehicle-mounted interconnection gateway, and the OTA upgrading and refreshing strategy can not be changed due to vehicle type configuration change of a vehicle or controller supplier change on the vehicle, so that great convenience can be brought to an automobile developer OEM;
5. the vehicle-mounted interconnection gateway can define a flexible and safe unified file format for OTA upgrading and refreshing, can be compatible with upgrading and refreshing of an intelligent controller and a non-intelligent controller on a vehicle, and is convenient for unified management of all controllers on the vehicle;
6. the upgrading and refreshing of each controller on the vehicle can be deeply customized, for example, a refreshing sequence is set for a plurality of controllers on the vehicle, and the controllers are upgraded and refreshed according to the set refreshing sequence, so that the success rate of the upgrading and refreshing is improved, and the refreshing time is shortened; for example, each controller is divided into modules, so that a certain module or a plurality of modules of a certain controller are independently refreshed, the flow is saved, and the refreshing time can be shortened;
7. designing corresponding error handling and rollback strategies, for example, when bus faults, signal interference or the fact that the upgraded versions of the controllers are incompatible in the refreshing process, restarting a refreshing flow according to the number of attempts configured in a refreshing configuration file, and if the attempts fail for many times, attempting to refresh the previous old version;
8. not only can upgrade and refresh intelligent controller and non-intelligent controller on the vehicle, can also carry out self-refreshing to on-vehicle interconnected gateway to guarantee on-vehicle interconnected gateway's normal operating and function upgrade.
Drawings
Fig. 1 is a system architecture diagram in the existing OTA upgrade and refresh mode;
fig. 2 is a functional block diagram of an on-vehicle internet gateway according to an embodiment of the present invention;
FIG. 3 is a diagram of a unified file format in an embodiment of the invention;
fig. 4 is a functional block diagram of an in-vehicle internet gateway according to another embodiment of the present invention;
fig. 5 is a schematic diagram illustrating a result of module-level refreshing performed on a controller by an on-vehicle internet gateway according to an embodiment of the present invention;
FIG. 6 is a flowchart of a vehicle OTA upgrade method according to an embodiment of the present invention;
fig. 7 is a flowchart of information interaction between the vehicle-mounted internet gateway and the cloud server in the vehicle OTA upgrading method according to an embodiment of the present invention.
Detailed Description
The core idea of the technical scheme of the invention is that a one-stop refreshing scheme is designed, namely a vehicle-mounted interconnection gateway and a method for realizing vehicle OTA (over the air) upgrading and refreshing by utilizing the vehicle-mounted interconnection gateway, so that the upgrading and refreshing of intelligent controllers connected by USB/Ethernet (Ethernet) and the like CAN be finished, the upgrading and refreshing of non-intelligent controllers (namely, traditional controllers with embedded real-time operating systems) of all CAN subnets CAN be finished, and all OTA control strategies CAN be finished in the vehicle-mounted interconnection gateway, so that unified refreshing strategies and data formats CAN be formed, and the vehicle OTA upgrading and refreshing schemes with different vehicle types and different configurations CAN be unified by a whole vehicle factory; furthermore, a more deeply customized vehicle OTA upgrade refresh scheme can be provided, such as individual refresh, refresh sequencing configuration, multi-subnet parallel refresh, etc. of each module of a certain controller (ECU) can be implemented, so as to solve the problems in the existing vehicle OTA upgrade refresh scheme mentioned in the background art.
The present invention will be described in detail with reference to the accompanying drawings in order to make the objects and features of the present invention more comprehensible, however, the present invention may be realized in various forms and should not be limited to the embodiments described above. Furthermore, it will be understood that each block of the block diagrams and/or flowchart illustrations, and combinations of blocks in the block diagrams and/or flowchart illustrations, can be implemented by special purpose hardware-based systems that perform the specified functions or acts, or combinations of special purpose hardware and computer program instructions. It is well known to those skilled in the art that implementation by hardware, by software, and by a combination of software and hardware are equivalent.
Referring to fig. 2, an embodiment of the present invention provides an in-vehicle interconnection gateway, which is installed in a vehicle and includes a Microprocessor (MPU)21 and a Microcontroller (MCU)22 integrated together. The MCU22 and the MPU21 are communicated by an SPI bus. Wherein the MPU21 is configured to: the method comprises the steps of interacting with a cloud (namely a cloud server, not shown) to receive an upgrade package 1 issued by the cloud, analyzing first upgrade refresh data for performing upgrade refresh on an intelligent controller (namely intelligent ECUs 1, … and intelligent ECUms) on the vehicle and second upgrade refresh data for performing upgrade refresh on a non-intelligent controller (namely non-intelligent ECUs 1, … and non-intelligent ECUn) on the vehicle from the upgrade package 1, and performing upgrade refresh on the intelligent controller (namely intelligent ECUs 1, … and intelligent ECUms) on the vehicle according to the first upgrade refresh data. The MCU22 is configured to: the system is in communication connection with the MPU21 through an SPI bus, and is triggered by the MPU21 when the MPU21 parses the second upgrade refresh data, so as to upgrade and refresh the non-intelligent controller (i.e., the non-intelligent ECUs 1 and …., and the non-intelligent ECUn) on the vehicle according to the second upgrade refresh data issued by the MPU. The intelligent ECUm is, for example, a dashboard IPC connected to the MPU21 via a USB, Ethernet (Ethernet) or MOST optical fiber network, a car HU of an automobile, a navigation device, and a controller of various multimedia devices (e.g., a speaker, a display screen, a camera, a car phone, etc.), the non-intelligent ECUm is, for example, a body controller BCM (e.g., including a car light, a door lock, an electric seat, a car air conditioner, etc.) connected to the MCU22 via a controller area network CAN bus, a high-speed vehicle FlexRay bus, a low-speed serial bus LIN bus, etc., a tailgate controller TGC (which may perform a function of controlling the opening of a trunk by kicking, etc., and has a motor control algorithm, calibratable control parameters), a battery management system BMS, and an engine management system EMS (e.g., including engine control, ABS, suspension control, etc.), etc. That is, the MCU22 is equipped with an embedded real-time operating system, so that the upgrade and refresh of the non-intelligent controllers connected to the conventional CAN nodes CAN be realized, the MPU21 is equipped with an intelligent operating system (e.g., Linux operating system), so that the upgrade and refresh of the intelligent controllers connected to the nodes such as USB, Ethernet, or MOST optical fiber network CAN be realized, and the MCU22 CAN realize the parallel refresh and request the second upgrade and refresh data of each non-intelligent controller from the MPU21 in real time according to the refresh rate.
Referring to fig. 2, in the embodiment, the MPU21 includes a cloud interaction module 211, a file parsing module 212, an intelligent controller client module 213, a self-upgrade module 214, and a communication server module 215.
The cloud interaction module 211 is a 4G or 5G communication module, and is configured to establish a secure communication link with the cloud, so as to download the upgrade package 1 from the cloud, and specifically includes: the system comprises a downloading unit 2111, a secure communication link unit 2112 and an ECU version management unit 2113, wherein the secure communication link unit 2112 can interact with a cloud to establish a secure communication link so as to ensure the communication security between the vehicle-mounted internet gateway and a cloud server, and enable the communication link to be used by the downloading unit 2111 and the ECU version management unit 2113, the downloading unit 2111 is used for downloading an upgrade package 1 of a corresponding version from the cloud, verifying information used for verifying the upgrade package 1, and key information used for decrypting the upgrade package 1, and the ECU version management unit 2113 is used for managing the downloaded upgrade package version and acquiring software versions installed in each of the intelligent controllers and the non-intelligent controllers so as to determine to which specific version the software versions of each of the intelligent controllers and the non-intelligent controllers are upgraded. Each upgrade package 1 includes a file header, a data block information header, data block contents, and verification information.
The file parsing module 212 is configured to perform file parsing on the upgrade package 1 to parse first upgrade refresh data for performing upgrade refresh on smart controllers (i.e., smart ECUs 1, …., smart ECUm) on the vehicle and second upgrade refresh data for performing upgrade refresh on non-smart controllers (i.e., non-smart ECUs 1, …., non-smart ECUn) on the vehicle from the upgrade package 1. In this embodiment, the file parsing module 212 includes an upgrade package verifying unit 2121, a key management unit 2122, and a file management unit 2123. The upgrade package verifying unit 2121 is configured to verify the validity of the upgrade package 1 downloaded by the downloading unit 2111; the key management unit 2122 is configured to manage the key information downloaded by the download unit 211 to help the file management unit 2123 parse the upgrade package 1 passing the validity verification, and perform encryption protection on the file parsed and converted by the file management unit 2123; the file management unit 2123 is configured to parse the upgrade package 1 passing the validity verification according to the related key in the key management unit 2122, so as to parse, from the upgrade package, first upgrade refresh data used for upgrading and refreshing the intelligent controller, second upgrade refresh data used for upgrading and refreshing the non-intelligent controller, and third upgrade refresh data used for self-refreshing the vehicle-mounted internet gateway. In this embodiment, in order to unify the policy and improve the overall security of the OTA refresh scheme and the refresh requirements of the compatible intelligent controller and the non-intelligent controller, the file management unit 2123 further converts the file formats of the first upgrade refresh data and the second upgrade refresh data into a unified file format. Specifically, the unified file format includes four types of files, namely an upgrade package configuration file (i.e. FOTA configuration file) for describing a requirement of performing OTA refresh on the vehicle, a controller refresh configuration file (i.e. ECUi refresh configuration file, i is a natural number) for describing refresh information of each controller on the vehicle, an original data refresh file (i.e. ECU refresh file-original data) for refreshing each controller, and a differential data refresh file (i.e. ECU refresh file-differential data), as shown in the following table:
file type Byte(s) Means of
0x0001 2 FOTA profile
0x0002 2 ECU Refresh configuration File
0x0003 2 ECU Refresh File-raw data
0x0004 2 ECU Refresh File-Difference data
At present, the controller on the vehicle is refreshed on the basis of the overall management of the controller in the market, but after-sale vehicles often only need to update a certain calibration data or application program in a certain controller, so in order to save traffic and shorten refresh time, the four types of files are all divided according to each controller and its module to implement a module-level refresh policy of each controller and rollback processing when refresh fails, at this time, for an upgrade package, the organization relationship of each file in a unified file format converted by the file management unit 2123 is shown in fig. 3, where an upgrade package configuration file (i.e., FOTA configuration file) is used to describe the requirement of one OTA upgrade and refresh, and includes the number of controllers to be refreshed (i.e., the number of ECUs in the refresh package), basic refresh information (including refresh sequence, bus, system type, etc.), and check information of the overall refresh package (including a general message authentication code or a key TotalCMAC, a key, a module, Message authentication code or key CMAC, signature, access credentials, etc. for each controller's refresh data); the controller refresh configuration file (i.e. an ECUi refresh configuration file, i is a natural number) is used for describing refresh information of a specific controller ECU, and comprises an address range (ECUID) of the specific controller, the number of files (i.e. the number of modules) to be refreshed specifically, a module encryption CMAC subnet, security algorithm information and verification method information (i.e. a message authentication code or a key CMAC of each module); the original data refreshing file and the differential data refreshing file form a refreshing file of a specific controller ECU, the refreshing file comprises a file header and file contents, the file header is used for describing version information and verification information of the file contents, the file contents (BIN) comprise specific refreshing data contents, and the file header of each differential data refreshing file comprises differential configuration, a number, an address, a total length, a segment length, verification method information (CAMC) and the like. The specific refresh file of a certain controller is composed of refresh files of modules, for example, the controller ECU1 in fig. 3 has n modules, and the differential data refresh files contained in the specific refresh files are n refresh files corresponding to the n modules one to one, that is, the ECU1 refresh file 1 to the ECU1 refresh file n; the controller ECU2 has n modules, and the differential data refresh files contained therein are n refresh files corresponding to the n modules one to one, that is, the ECU2 refresh file 1 to the ECU2 refresh file n; the controller ECU3 has n modules, and the differential data refresh file included therein is n refresh files corresponding one-to-one to the n modules thereof, that is, the ECU3 refresh file 1 to the ECU3 refresh file n. For the upgrade refresh description of a certain controller ECU, the file management unit describes the upgrade refresh file (including an original data refresh file and a differential data refresh file) and a controller refresh configuration file converted by the file management unit, the files form an original sub-packet, and for one OTA refresh, the file management unit comprises an FOTA configuration file and a plurality of original sub-packets, which are called molecular packets. After the cloud interaction module 211 of the MPU21 finishes downloading the sub-packets, the file analysis module 212 decrypts and analyzes the refresh task, because the refresh file of the intelligent controller is large, the cloud interaction module 211 of the MPU21 generally downloads the sub-packets by adopting differential data, the file analysis module 212 locally restores the sub-packets into original data through a differential algorithm, then updates and refreshes the corresponding intelligent controller, generally establishes https connection with the intelligent controller through USB/Ethernet/MOST for refreshing the intelligent system, directly transmits the refresh file, and feeds back the refresh progress to the cloud in real time. If the file parsing module 212 of the MPU21 finds that upgrading and refreshing of the non-intelligent controllers on the CAN subnets are required, the MCU22 is triggered to switch the inter-core communication protocol (i.e., switch the SPI communication between the MPU21 and the MCU 22), and start the functions of the conventional controller Client module (FOTA Client)224 of the MCU22, and the MCU22 CAN upgrade and refresh the non-intelligent controllers of the respective CAN subnets through the communication connection unit 2246 (i.e., Client-side protocol simulation diagnostic instrument of the UDS).
In this embodiment, the file management unit 2123 further performs encryption protection on all configuration files (including the FOTA configuration file and the controller refresh configuration file corresponding to each controller) and the refresh file (including the original data refresh file and the differential data refresh file corresponding to each controller) by using different encryption and verification methods, and the encryption keys of the refresh files (including the original data refresh file and the differential data refresh file) of each controller are different according to different sub-packets downloaded each time, so as to improve the security.
In this embodiment, the file management unit 2123 further stores all the refresh files and the backup refresh files in an embedded multimedia memory (eMMC) system local to the vehicle, in order to prevent the eMMC system from being separately stripped by a hacker and being sent to other systems for parsing, the key management unit 2122 can keep the full life cycle of all the refresh files converted by the file management unit 2123 encrypted, when a refresh trigger occurs, the file management unit 2123 can dynamically decrypt the refresh files and temporarily store the decrypted data in the RAM, and once a power failure occurs, all the decrypted data are automatically cleared, thereby greatly increasing the security of the data, the key management unit 2122 stores the encrypted information after encrypting and parsing the files in the MCU22 and the MPU21 in a crossed manner, so that the encrypted information in the MCU22 and the MPU21 are verified with each other, and further mapped to the secure hardware modules (not shown) of the secure hardware modules 222 and 21 of the MCU22 for storage, therefore, even if the Linux system is invaded, OTA upgrading and refreshing processes and refreshing data of all the controllers can be effectively protected.
The smart controller client module 213 is configured to: and the intelligent controller (namely intelligent ECU1, …., intelligent ECUm) on the vehicle is in communication connection, so as to upgrade and refresh the intelligent controller (namely intelligent ECU1, …., intelligent ECUm) on the vehicle according to the file parsed and converted by the file parsing module 212.
The communication server module 215 is configured to: the SPI communication bus is in communication connection with the communication client module 221 of the MCU22, the MCU22 is triggered when the file parsing module 212 parses the second upgrade refresh data, and the second upgrade refresh data (i.e., the encrypted four types of files) is sent to the MCU22, so that the corresponding non-intelligent controller can be upgraded and refreshed according to the second upgrade refresh data.
Self-upgrade module 214 is configured to: when the file parsing module 212 parses out the third upgrade refresh data for vehicle-mounted internet gateway self-refresh, after the upgrade refresh of both the intelligent controller and the non-intelligent controller on the vehicle is completed, the self-refresh of the MPU21 is completed through the SPI self-refresh MCU22, so as to ensure that the progress and the state of the entire OTA refresh process are visible. Referring to fig. 4, in this embodiment, the MPU21 is a dual backup system having a main system a and a backup system B, where the main system a is configured to update and refresh the intelligent controller on the vehicle, and then update and refresh the MCU21 and the backup system B; the backup system B is configured to update and refresh the main system a of the microprocessor when the vehicle-mounted interconnection gateway is restarted, and specifically, when the MCU22 and the MPU21 are both refreshed, the vehicle-mounted interconnection gateway is restarted to switch both the MCU22 and the MPU21 to the latest software state.
In this embodiment, the MCU22 includes a communication client module 221, a hardware security module 222, a boot load module 223, and a conventional controller management module 224.
The communication client module 221 is configured to be communicatively connected to the communication server module 215 of the MPU22 through an SPI communication bus, so as to receive the second upgrade refresh data issued by the communication server module 215 (i.e., the file parsing module 212 converts four types of files for upgrade refresh of the non-intelligent controller), and feed back the upgrade refresh progress of the corresponding non-intelligent controller to the communication server module 215. When the file parsing module 212 of the MPU22 parses the second upgrade refresh data, it triggers communication between the communication server module 215 and the communication client module 221, and further starts the function of the conventional controller management module 224, so as to upgrade and refresh the non-intelligent controllers of each subnet.
In this embodiment, the hardware security module 222 is configured to encrypt data received and sent by the microcontroller MCU22 and to map and store encryption information in the first upgrade refresh data and the second upgrade refresh data, so that all refresh files of the non-smart controller can be kept encrypted in a full life cycle, and processes and data of OTA upgrade refresh can be effectively protected even if a system of the smart controller is invaded.
The start loading module 223 is configured to, when the file parsing module parses third upgrade refresh data for performing upgrade refresh on the vehicle-mounted internet gateway from the upgrade package, perform upgrade refresh on the microcontroller MCU22 according to the third upgrade refresh data, specifically, after the MCU22 and the MPU21 are both finished refreshing, and when the vehicle-mounted internet gateway is restarted, the start loading module 223 may enable the MCU22 to switch to the latest software state.
The legacy controller management module 224 is configured to be communicatively connected to each of the non-smart controllers (i.e., the non-smart ECUs 1, … …, the non-smart ECUs) on the vehicle, and perform the upgrade refresh on the corresponding non-smart controller according to the second upgrade refresh data and feed back the progress of the upgrade refresh of the non-smart controller to the communication client module 221. In this embodiment, the conventional controller management module includes: a legacy controller client unit 2241, a cache management unit 2242, a file verification unit 2243, a refresh flow control unit 2244, a file parsing unit 2245, and a communication connection unit 2246. The legacy controller client unit 2241 is configured to receive the second upgrade refresh data and acquire related information for verifying and analyzing the second upgrade refresh data, and acquire software version information of the non-intelligent controller on the vehicle, and update and refresh the non-intelligent controller on the vehicle according to the second upgrade refresh data, and feed back the progress of update and refresh to the communication client module 221; the cache management unit 2242 is configured to cache the data and the like analyzed by the file analysis unit 2245; the file verification unit 2243 is configured to verify the validity of the second upgrade refresh data issued by the file parsing module 212 according to the related information for verifying the second upgrade refresh data, which is acquired by the legacy controller client unit 2241; the file parsing unit 2245 is configured to parse the second upgrade refresh data according to the related information (e.g., message key, etc.) for parsing the second upgrade refresh data, which is acquired by the legacy controller client unit 2241; the refresh flow control unit 2244 is configured to obtain a dependency relationship between the non-intelligent controllers on the vehicle through the legacy controller client unit 2241, and determine a refresh sequence of each of the non-intelligent controllers according to the dependency relationship, and the legacy controller client unit 2241 is further configured to update and refresh the non-intelligent controllers on the vehicle according to the refresh sequence and the data parsed by the file parsing unit 2245. The communication connection unit 2246 is configured to implement a secure communication connection between the legacy controller client unit 2241 and each of the non-smart controllers to enable bidirectional communication between the legacy controller client unit 2241 and each of the non-smart controllers.
Wherein, when the configuration file and the refresh file parsed by the file parsing module 212 and the file parsing unit 2245 include module division information of a corresponding controller, the smart controller client module 213 and the legacy controller client unit 2241 are further configured to: according to the software version updated and refreshed in the previous time of each module of the controllers (i.e. the smart ECUs 1, …., the smart ECUm and the non-smart ECUs 1, …., the non-smart ECUn) on the vehicle, the four types of files parsed and converted by the file parsing module 212 from the upgrade package of this time, and the four types of files parsed by the file parsing unit 2245 from the files under the file parsing module 212, module-level upgrade and refresh of the corresponding modules in the controllers requiring upgrade and refresh of rollback processing in the module level when the refresh fails, specifically, as shown in fig. 5, since the corresponding encryption keys are different at each ECU refresh time, the key management unit 2122 needs to record the encryption key of each version of each ECU, assuming that after the upgrade package is downloaded for the first time, the smart controller client module 213 or the conventional controller client unit 2241 updates the ECU modules of the controllers 1 and 2, and simultaneously upgrade modules 1 to 3 of the refresh controller ECU1 and modules 1 to 2 of the controller ECU2 by parallel refresh; after downloading the upgrade package for the second time, the intelligent controller client module 213 or the conventional controller client unit 2241 performs module-level upgrade and refresh on the controller ECU1 and the controller ECU2, and only upgrades and refreshes the module 1 of the controller ECU1 and the module 1 of the controller ECU 2; after downloading the upgrade package for the third time, the smart controller client module 213 or the legacy controller client unit 2241 performs module-level upgrade refresh on the controller ECU1 and the controller ECU2, and only upgrades and refreshes the modules 1 and 2 of the controller ECU1 and the module 1 of the controller ECU 2; after downloading the upgrade package for the fourth time, the intelligent controller client module 213 or the conventional controller client unit 2241 performs module-level upgrade refresh on the controller ECU1 and the ECU2, and upgrades the modules 1 to 3 of the refresh controller ECU1 and the modules 1 to 2 of the controller ECU2, but both the upgrade refresh modules 1 and 2 of the controller ECU2 fail, at this time, the intelligent controller client module 213 or the conventional controller client unit 2241 decrypts the backup data of the version after the last upgrade refresh of each module of the controller ECU2 according to different keys to perform rollback refresh on each module of the controller ECU2, that is, the module 1 of the controller ECU2 is refreshed back to the version M21V3+ Key3 of the third upgrade refresh, and the module 2 of the controller ECU2 is refreshed back to the version M22V1+ Key1 of the first upgrade refresh. In other embodiments of the present invention, when the modules 1 and 2 of the controller ECU2 are upgraded and refreshed based on the fourth upgrade package, if the module 1 is successfully refreshed, the version becomes the version M21V4+ Key4, and the module 2 fails to be refreshed, then the module 2 of the controller ECU2 may be simply refreshed back to the version M22V1+ Key1 of the first upgrade refresh.
In addition, during the refreshing process of the intelligent controller and the non-intelligent controller, there may be a case where the updating and refreshing of this time is failed due to bus failure (busoff), signal interference, or version incompatibility of the controllers, and in order to solve this problem, the number of attempts to update and refresh the controller is preferably included in each of the controller updating configuration files converted by the file parsing module 212, and at this time, the intelligent controller client module 213 and the legacy controller client unit 2241 are further configured to: when an upgrade refresh of a certain controller fails, restarting a refresh process of the controller according to the number of attempts to refresh the controller configured in the controller refresh configuration file corresponding to the controller, and further attempting to refresh the software version of the controller back to the software version refreshed by the last upgrade after all attempts of the number of attempts have failed, for example, referring to fig. 5, if the smart controller client module 213 or the legacy controller client unit 2241 performs an upgrade refresh on the module 1 and the module 2 of the controller ECU2 based on the fourth upgrade package downloaded for the fourth time, the smart controller client module 213 and the legacy controller client unit 2241 configure 4 attempts opportunities for the controller ECU2 in the fourth upgrade package, and when the first attempt fails to refresh the upgrade, the smart controller client module 213 and the legacy controller client unit 2241 may update the module 1 and the module 2 of the controller ECU2 based on the fourth upgrade package downloaded for the fourth time again, if all 4 attempts are made, but the upgrade refreshing of the module 1 and the module 2 of the controller ECU2 still fails, the intelligent controller client module 213 and the conventional controller client unit 2241 perform rollback refreshing on each module of the controller ECU2 according to the backup data of the version of each module of the controller ECU2 after the last upgrade refreshing is successful, by decrypting according to different keys, that is, the module 1 of the controller ECU2 is refreshed into the version M21V3+ Key3 based on the upgrade package of the third time, and the module 2 of the controller ECU2 is refreshed into the version M22V1+ Key1 based on the upgrade package of the first time.
In addition, if there is a dependency on the refresh of multiple controllers (between intelligent controllers or between an intelligent controller and a non-intelligent controller or between non-intelligent controllers), such as a software version of one controller being dependent on a version of another controller, a dependency relationship is generated, and at this time, the file parsing module 212 or the intelligent controller client module 213 or the refresh flow control unit 2244 will make a set of dependency algorithms to determine the refresh sequence of each controller ECU, thereby enabling the smart controller client module 213 and the legacy controller client unit 2241 to update and refresh the corresponding controllers in the refresh sequence, wherein the controller ECU is not sensitive to the refresh sequence, the intelligent controller client module 213 and the legacy controller client unit 2241 may implement the parallel refresh policy according to the activation condition of each controller.
It will be appreciated that the MPUs and MCUs, and the respective modules that they contain, may be implemented at least in part as hardware circuits, such as Field Programmable Gate Arrays (FPGAs), Programmable Logic Arrays (PLAs), system-on-a-chip, system-on-a-substrate, system-on-a-package, Application Specific Integrated Circuits (ASICs), or in hardware or firmware in any other reasonable manner of integrating or packaging a circuit, or in a suitable combination of three implementations, software, hardware, and firmware. Alternatively, at least one of the MPU and MCU and the respective modules included therein, respectively, may be at least partially implemented as a computer program module, which may perform the functions of the respective modules when the program is executed by a computer.
Referring to fig. 2, an embodiment of the present invention further provides a vehicle OTA upgrade system, including: a cloud server (not shown) on which at least one upgrade package 1 is stored; a plurality of controllers mounted on a vehicle, the controllers including at least one smart controller (i.e., smart ECUs 1, …., smart ECUm, m is not less than 1) and at least one non-smart controller (i.e., non-smart ECUs 1, …., non-smart ECUn, n is not less than 1); and the vehicle-mounted internet gateway shown in fig. 2 is in communication connection with the cloud server and the intelligent controller and/or the non-intelligent controller respectively. Wherein, the intelligent controller comprises a vehicle dashboard IPC, a car HU of a car, a navigation device, and controllers on various multimedia devices (such as a sound box, a display screen, a camera, a car phone, etc.), the non-intelligent controller comprises a vehicle body controller BCM (such as a car light, a door lock, an electric seat, a car air conditioner, etc.), a tail gate controller TGC (which can realize the function of controlling the opening of a trunk by kicking), a battery management system BMS, an engine management system EMS (such as an engine control, an ABS, a suspension control, etc.), and the like; the vehicle-mounted interconnection gateway is interactive with the cloud, is in communication connection with the corresponding intelligent controller through a USB/Ethernet/MOST optical fiber network and the like, and is in communication connection with each non-intelligent controller through a CAN bus, a high-speed vehicle-mounted bus FlexRay bus or a low-speed serial bus LIN bus. A cloud server may be understood as a service point that provides processing, databases, communications facilities. For example, a cloud server may refer to a single physical processor with associated communications and data storage and database facilities, or it may refer to an aggregation of networked or clustered processors, associated networks and storage devices, and operates on software and one or more database systems and application software that support the services provided by the server. In an embodiment of the invention, the cloud Server may include one or more processors, one or more memories, one or more power supplies, one or more wired or wireless network interfaces, one or more input/output interfaces, or one or more operating systems, such as Windows Server, Mac OS X, Unix, Linux, FreeBSD, or the like. The cloud server may be a unitary server or a distributed server across multiple computers or computer data centers. The server may be of various types, such as, but not limited to, a web server, a news server, a mail server, a message server, an advertisement server, a file server, an application server, an interaction server, a database server, or a proxy server. In some embodiments, each server may include hardware, software, or embedded logic components or a combination of two or more such components for performing the appropriate functions supported or implemented by the server.
Referring to fig. 2, an embodiment of the present invention further provides a vehicle, including: the vehicle-mounted interconnection gateway is shown in fig. 2, wherein the controllers include at least one intelligent controller and at least one non-intelligent controller, the intelligent controller includes controllers on devices such as a car dashboard IPC, a car HU of a car, a navigation device, and various multimedia devices (such as a sound box, a display screen, a camera, a car phone, etc.), and the non-intelligent controller includes a car body controller BCM (including a car light, a door lock, an electric seat, a car air conditioner, etc., for example), a tailgate controller TGC (capable of realizing functions such as kick control of opening a trunk, etc.), a battery management system BMS, and an engine management system EMS (including an engine control, an ABS, a suspension control, etc., for example); the vehicle-mounted interconnection gateway is interactive with the cloud, is in communication connection with the corresponding intelligent controller through a USB/Ethernet/MOST optical fiber network and the like, and is in communication connection with each non-intelligent controller through a CAN bus, a high-speed vehicle-mounted bus FlexRay bus or a low-speed serial bus LIN bus.
Referring to fig. 2 and 6, an embodiment of the present invention further provides a method for vehicle OTA upgrade by using the vehicle-mounted internet gateway of the present invention, including the following steps:
firstly, the MPU21 of the vehicle-mounted internet gateway in the embodiment of the present invention is communicatively connected to a cloud to receive an upgrade package delivered by the cloud, and specifically, the cloud triggers a vehicle OTA upgrade process through a short message, so that the MPU21 of the vehicle-mounted internet gateway is communicatively connected to the cloud, the MPU21 of the vehicle-mounted internet gateway reads software versions of various intelligent controllers on the vehicle, the MCU22 reads software versions of various non-intelligent controllers on the vehicle, and determines whether a backup package (i.e., a backup refresh file after the last upgrade refresh is successful) exists in a local eMMC system of the vehicle, if the backup package exists, the upgrade package for the upgrade refresh is further downloaded from the cloud, and if the backup package does not exist, the backup package is downloaded from the cloud first, and can be used for fault self-recovery and cloud version rollback when the upgrade refresh fails.
Secondly, the vehicle-mounted internet gateway or the cloud confirms a refreshing environment or a refreshing time determined by reservation to a user, when the user confirms that refreshing can be carried out currently or the refreshing time appointed by the user is reached (namely, the refreshing condition is met), the MPU21 of the vehicle-mounted internet gateway analyzes first upgrading refreshing data for upgrading and refreshing an intelligent controller on a vehicle and second upgrading refreshing data for upgrading and refreshing a non-intelligent controller on the vehicle from the downloaded upgrading package, then the MPU21 upgrades and refreshes the intelligent controller on the vehicle according to the first upgrading refreshing data, and triggers the MCU22 when the second upgrading refreshing data is analyzed, so that the MCU22 upgrades and refreshes the non-intelligent controller on the vehicle, wherein a parallel refreshing strategy is adopted among a plurality of controllers insensitive to the refreshing sequence, and when the plurality of controllers have dependency relationships, determining the dependency relationships among the controllers on the vehicle, establishing a set of dependency algorithm to determine a refreshing sequence among the controllers with the dependency relationships, and upgrading and refreshing the controllers with the dependency relationships according to the refreshing sequence.
Thirdly, after the upgrade refreshing processes of the intelligent controller and the non-intelligent controller on the vehicle are executed (including all the successful refreshing and partial controller rolling back), the MPU21 of the vehicle-mounted internet gateway judges whether third upgrade refreshing data (namely whether a self-refreshing request exists) for self-refreshing the vehicle-mounted internet gateway is analyzed, if so, the software version numbers of the MCU22 and the MPU21 are read, the MCU22 is self-refreshed first according to the third upgrade refreshing data, the MPU21 is self-refreshed, and if not, the next step is carried out;
and fourthly, judging whether all the intelligent controllers, the non-intelligent controllers and the vehicle-mounted internet gateways on the vehicle are refreshed successfully or not, further judging whether the number of upgrading and refreshing attempts to the intelligent controllers and the non-intelligent controllers and the vehicle-mounted internet gateways reaches the maximum retry number or not when at least one of the intelligent controllers, the non-intelligent controllers and the vehicle-mounted internet gateways is not refreshed successfully, further trying to upgrade and refresh the controllers if the number of upgrading and refreshing attempts to the controllers does not reach the maximum retry number, refreshing until the controller is refreshed successfully before the maximum retry number is reached, and rolling back the controllers if the number of upgrading and refreshing still does not succeed.
Referring to fig. 7, in this embodiment, the vehicle-mounted internet gateway and the cloud server use an OMA-DM protocol to complete the vehicle OTA upgrading method of this embodiment, and the specific communication flow is as follows:
1. the cloud server sends a notice to the vehicle-mounted internet gateway;
2. the vehicle-mounted internet gateway performs identity authentication according to the content of the short message (the process requires the user to input and confirm related information);
3. the vehicle-mounted internet gateway initiates a session request to the cloud server;
4. the cloud server issues a command of replacing the download address to the vehicle-mounted internet gateway;
5. the vehicle-mounted internet gateway feeds back a command execution result to the cloud server;
6. the cloud server sends a downloading command to the vehicle-mounted Internet gateway;
7. the vehicle-mounted internet gateway reports a command execution result to the cloud server;
8. the cloud server issues a progress acquiring command to the vehicle-mounted internet gateway;
9. at certain time intervals, the vehicle-mounted internet gateway feeds back progress to the cloud server;
10.1, displaying the downloading progress to a Web page, and specifically displaying the downloading progress to a Web page of a cloud server and/or a Web page of a vehicle-mounted internet gateway through a Web service;
10.2, the cloud server pushes progress to a user through a vehicle-mounted internet gateway or a Web page;
10.3, the cloud server issues a progress acquiring command to the vehicle-mounted internet gateway;
11. the vehicle-mounted internet gateway reports the downloading progress to the cloud server at regular time;
12. the vehicle-mounted internet gateway reports a downloading result (downloading success or downloading failure) to the cloud server at regular time;
13.1, displaying the downloading result to a Web page, and specifically displaying the downloading result to a Web page of a cloud server and/or a Web page of a vehicle-mounted internet gateway through a Web service;
13.2, the cloud server pushes the result to the user through a vehicle-mounted internet gateway or a Web page;
13.3, the cloud server informs the vehicle-mounted internet gateway of ending the session;
14. returning and silencing by the vehicle-mounted interconnected gateway;
15. the cloud server pushes an upgrade confirmation message to a user through the vehicle-mounted internet gateway;
16. the user informs the cloud server of the information of user confirmation/reservation upgrading through means such as a vehicle-mounted internet gateway or a web server or short messages;
17. the cloud server sends a short message notification to the vehicle-mounted Internet gateway to activate an upgrading and refreshing process;
18. the vehicle-mounted internet gateway initiates a session request to the cloud server;
19. the cloud server issues a data acquisition command (such as a software version, a backup package and the like of the controller) to the vehicle-mounted internet gateway;
20. the vehicle-mounted internet gateway reports data to the cloud server;
21. the cloud server issues a refreshing command to the vehicle-mounted internet gateway;
22. the vehicle-mounted internet gateway feeds back a refreshing command execution result to the cloud server;
23. the cloud server issues a command for obtaining the refreshing progress to the vehicle-mounted internet gateway;
24. reporting a refreshing progress to a cloud server by the vehicle-mounted internet gateway at certain time intervals;
25.1, displaying the refreshing progress to a Web page, and specifically displaying the refreshing progress to a Web page of a cloud server and/or a Web page of a vehicle-mounted internet gateway through a Web service;
25.2, the cloud server pushes the refreshing progress to the user through a vehicle-mounted internet gateway or a Web page;
25.3, the cloud server issues a command for obtaining the refreshing progress to the vehicle-mounted internet gateway;
26. the vehicle-mounted internet gateway reports the refreshing progress to the cloud server at regular time;
27. the vehicle-mounted internet gateway reports a refreshing result (refreshing success or refreshing failure) to the cloud server at regular time;
28.1, displaying the refreshing result to a Web page, and specifically displaying the refreshing result to a Web page of a cloud server and/or a Web page of a vehicle-mounted internet gateway through a Web service;
28.2, the cloud server pushes a refreshing result to the user through a vehicle-mounted internet gateway or a Web page;
28.3, if the refreshing is successful, informing the vehicle-mounted interconnection gateway to finish the session;
29. if the refreshing fails, the cloud server issues a rollback progress acquisition instruction (namely the rollback progress instruction) to the vehicle-mounted internet gateway;
30. reporting a rollback progress (namely a rollback progress) to a cloud server by the vehicle-mounted internet gateway at certain time intervals;
31.1, displaying the rollback progress on a Web page, and specifically displaying the rollback progress on a Web page of a cloud server and/or a Web page of a vehicle-mounted internet gateway through a Web service;
31.2, the cloud server pushes a backspacing progress to a user through a vehicle-mounted internet gateway or a Web page;
31.3, the cloud server issues a command for acquiring the backspacing progress to the vehicle-mounted internet gateway;
32. the vehicle-mounted internet gateway reports the backspacing progress to the cloud server at regular time;
33. the vehicle-mounted internet gateway reports a rollback result (namely a rollback result) to the cloud server at regular time;
34.1, displaying the backspacing result to a Web page, specifically displaying the backspacing result to a Web page of a cloud server and/or a Web page of a vehicle-mounted internet gateway through a Web service;
34.2, the cloud server pushes a backspacing result to a user through a vehicle-mounted internet gateway or a Web page;
34.3, after the rollback is finished, the cloud server informs the vehicle-mounted internet gateway to finish the session;
35. and after upgrading and refreshing are completed, the vehicle-mounted internet gateway returns to silence.
It should be noted that, in order to ensure that the progress and the state of the entire refresh process of the OTA is visible, preferably, the intelligent controller and the non-intelligent controller outside the vehicle-mounted interconnection gateway are updated, refreshed, attempted to rollback, etc. first, after the update refresh processes of the intelligent controller and the non-intelligent controller are completed, the vehicle-mounted interconnection gateway is refreshed, for self-refresh, the vehicle-mounted interconnection gateway self-refreshes the MCU through the SPI, and simultaneously completes the backup system refresh of the MPU, when the backup systems of the MCU and the MPU complete the refresh, the vehicle-mounted interconnection gateway is restarted to switch to the latest software state, wherein when the backup systems of the MCU and the MPU complete any refresh failure, it can be further determined whether the number of self-refresh attempts reaches the maximum retry number, if the maximum retry number is not reached, the self-refresh is further attempted until the self-refresh retry succeeds before the maximum retry number is reached, and if the maximum retry times are still not successful, rolling back the backup system of the MCU or MPU with the failure of self-refresh. The strategy of rolling back when the refresh fails once can avoid the problem that the controller and the vehicle-mounted interconnection gateway on the vehicle cannot work normally due to the refresh failure caused by bus failure, signal interference or the situation that the controller and the vehicle-mounted interconnection gateway on the vehicle are incompatible with the version of the upgrade refresh.
In order to unify the policy and improve the overall security of the OTA refresh scheme and the refresh requirements of the compatible intelligent controller and the non-intelligent controller, preferably, the vehicle OTA upgrade method further comprises: before the vehicle-mounted internet gateway performs upgrade and refresh on the intelligent controller and the non-intelligent controller on the vehicle, the vehicle-mounted internet gateway converts the first upgrade and refresh data and the second upgrade and refresh data analyzed from the upgrade package into a uniform file format, the uniform file format has the four types of files converted by the file analysis module, and specific contents are not described herein again. The vehicle-mounted interconnection gateway adopts different encryption and verification modes to configure the four files, stores the four files in a local embedded multimedia storage (eMMC) system of the vehicle in the process of upgrading and refreshing an intelligent controller and a non-intelligent controller on the vehicle, keeps encryption on the whole life cycle of all the four files, and stores the encrypted information in the MCU and the MPU in a crossed manner to realize mutual verification; when the upgrading and refreshing process of a certain controller of the vehicle is triggered, the vehicle-mounted internet gateway dynamically decrypts and temporarily stores the four types of files corresponding to the controllers, and automatically clears all dynamically decrypted data when power failure occurs.
Preferably, when the vehicle-mounted internet gateway upgrades and refreshes the intelligent controller and the non-intelligent controller on the vehicle, the vehicle-mounted internet gateway upgrades and refreshes the controllers on the vehicle at a module level according to module division of the controllers on the vehicle, so as to update only one calibration data or application program for one control, thereby saving traffic and shortening refresh time
An embodiment of the present invention further provides a computer storage medium having a computer program stored thereon, where the computer program, when executed by a processor, can implement the OTA vehicle upgrade method according to the present invention. The computer storage medium may be a tangible device that can hold and store instructions for use by an instruction execution device, such as, but not limited to, an electronic memory device, a magnetic memory device, an optical memory device, an electromagnetic memory device, a semiconductor memory device, or any suitable combination of the foregoing. More specific examples (a non-exhaustive list) of the computer storage medium would include the following: a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a Static Random Access Memory (SRAM), a portable compact disc read-only memory (CD-ROM), a Digital Versatile Disc (DVD), a memory stick, a floppy disk, a mechanical coding device, such as punch cards or in-groove projection structures having instructions stored thereon, and any suitable combination of the foregoing. The computer programs described herein may be downloaded to the various computing/processing devices from a computer storage medium, or to external computers or external storage devices via a network, such as the internet, a local area network, a wide area network, and/or a wireless network. The network may include copper transmission cables, fiber optic transmission, wireless transmission, routers, firewalls, switches, gateway computers and/or edge servers. The network adapter card or network interface in each computing/processing device receives the computer program from the network and forwards the computer program for storage in the computer storage medium in the respective computing/processing device. Computer programs for carrying out operations of the present invention may be assembly instructions, Instruction Set Architecture (ISA) instructions, machine related instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages, including an object oriented programming language such as Smalltalk, C + + or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The computer program may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider). In some embodiments, the electronic circuitry, such as a programmable logic circuit, a Field Programmable Gate Array (FPGA), or a Programmable Logic Array (PLA), can execute computer-readable program instructions to implement various aspects of the present invention by utilizing state information of a computer program to personalize the electronic circuitry.
Aspects of the present invention are described herein with reference to flowchart illustrations and/or block diagrams of methods, systems and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer programs. These computer programs may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the programs, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks. Such computer programs may also be stored in a computer storage medium that can direct a computer, programmable data processing apparatus, and/or other devices to function in a particular manner, such that the computer storage medium storing the computer program comprises an article of manufacture including instructions which implement the function/act specified in the flowchart and/or block diagram block or blocks.
The computer program may also be loaded onto a computer, other programmable data processing apparatus, or other devices to cause a series of operational steps to be performed on the computer, other programmable apparatus or other devices to produce a computer implemented process such that the computer program which executes on the computer, other programmable apparatus or other devices implements the functions/acts specified in the flowchart and/or block diagram block or blocks.
In summary, according to the technical scheme of the invention, one vehicle-mounted interconnection gateway is adopted to complete all functions of a plurality of main nodes such as a vehicle-mounted internet of vehicles terminal T-BOX and a gateway GW in the existing OTA upgrading method, so that communication links can be reduced, interaction details among the main nodes are shielded, data protection capability is increased, and the development cycle of the OTA upgrading scheme is shortened; OTA upgrading and refreshing can be carried out on the intelligent controller on the vehicle, OTA upgrading and refreshing can also be carried out on the non-intelligent controller on the vehicle, and complete OTA service can be formed without cross-domain cooperation; in addition, a vehicle-mounted interconnection gateway is adopted as a main node, so that parallel refreshing can be implemented on all sub-networks of the vehicle networking (namely all intelligent controllers and non-intelligent controllers on the vehicle) to reduce refreshing time, a uniform OTA upgrading refreshing strategy can be formed, the OTA upgrading refreshing strategy can not be changed due to vehicle type configuration change of the vehicle or controller supplier change on the vehicle, and great convenience can be brought to an automobile developer OEM; the vehicle-mounted interconnection gateway can define a flexible and safe unified file format for OTA upgrading and refreshing, can be compatible with upgrading and refreshing of an intelligent controller and a non-intelligent controller on a vehicle, and is convenient for unified management of all controllers on the vehicle; in addition, the upgrading and refreshing of each controller on the vehicle can be deeply customized, for example, a refreshing sequence is set for a plurality of controllers on the vehicle, and the controllers are upgraded and refreshed according to the set refreshing sequence, so that the success rate of the upgrading and refreshing is improved, and the refreshing time is shortened; for example, each controller is divided into modules, so that a certain module or a plurality of modules of a certain controller are independently refreshed, the flow is saved, and the refreshing time can be shortened; further, corresponding error handling and rollback strategies are designed, for example, when the updated versions of the controllers are found to be incompatible due to bus faults, signal interference in the refreshing process, the refreshing process is restarted according to the number of attempts configured in the refreshing configuration file, and if the attempts fail, the old versions before the refreshing process are attempted to be refreshed; not only can upgrade and refresh intelligent controller and non-intelligent controller on the vehicle, can also carry out self-refreshing to on-vehicle interconnected gateway to guarantee on-vehicle interconnected gateway's normal operating and function upgrade.
In addition, it should be appreciated that the technical solution of the present invention implements a one-stop OTA refresh policy, which brings great convenience to OTA management of OEMs of automobiles, inevitably leads to the development trend of subsequent OTA, and can also bring one-stop effect if the wireless interconnection function and the gateway function are integrated into other controllers, and the implementation principle is the same as that mentioned herein, and also belongs to the protection scope of the present invention.
The deep custom design for the vehicle-mounted refresh process, such as refresh sequence configuration, module-level refresh management, refresh error handling and rollback strategy, is also a great advantage of the technical scheme of the present invention, wherein the set unified file format can be correspondingly flexibly designed, but the present invention belongs to the protection scope of the present invention as long as the realized core idea is the content. Accordingly, various modifications and alterations of this invention may be made by those skilled in the art without departing from the spirit and scope of this invention. Thus, if such modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include such modifications and variations.

Claims (28)

1. An in-vehicle interconnection gateway installed on a vehicle, comprising:
the system comprises a microprocessor, a first updating module, a second updating module and a third updating module, wherein the microprocessor is configured to interact with a cloud end to receive an updating package sent by the cloud end, analyze first updating refreshing data and second updating refreshing data from the updating package, and update and refresh an intelligent controller on the vehicle according to the first updating refreshing data, the first updating refreshing data is used for updating and refreshing the intelligent controller on the vehicle, and the second updating refreshing data is used for updating and refreshing a non-intelligent controller on the vehicle;
and the microcontroller is configured to be in communication connection with the microprocessor and is triggered by the microprocessor when the microprocessor analyzes the second upgrading and refreshing data, so that the non-intelligent controller on the vehicle is upgraded and refreshed according to the second upgrading and refreshing data sent by the microprocessor.
2. The in-vehicle interconnect gateway of claim 1, wherein the microprocessor comprises:
a cloud interaction module configured to establish a secure communication link with the cloud to download the upgrade package from the cloud;
the file analysis module is configured to analyze the upgrade package to analyze first upgrade refresh data used for upgrading and refreshing an intelligent controller on the vehicle and second upgrade refresh data used for upgrading and refreshing a non-intelligent controller on the vehicle from the upgrade package;
a smart controller client module configured to communicatively couple with a smart controller on the vehicle to upgrade and refresh the smart controller on the vehicle according to the first upgrade refresh data; and the number of the first and second groups,
and the communication server module is configured to be in communication connection with the microcontroller through a communication bus, trigger the microcontroller when the second upgrade refresh data is analyzed by the file analysis module, and issue the second upgrade refresh data to the microcontroller.
3. The vehicular interconnect gateway of claim 2, wherein the file parsing module is further configured to perform file parsing on the upgrade package and convert a file parsed from the upgrade package that includes the first upgrade refresh data and the second upgrade refresh data into a unified file format.
4. The in-vehicle interconnection gateway of claim 3, wherein the unified file format comprises four types of files, namely an upgrade package configuration file for describing a requirement for OTA refresh of the vehicle, a controller refresh configuration file for describing refresh information of each of the intelligent controllers and the non-intelligent controllers, an original data refresh file for refreshing each of the intelligent controllers and the non-intelligent controllers, and a differential data refresh file; the upgrading package configuration file comprises the number of controllers needing to be refreshed on the vehicle, basic refreshing information and verification information of the whole refreshing package; the controller refresh configuration file comprises the number of files, address ranges, safety algorithm information and verification method information which need to be refreshed specifically by a certain intelligent controller or the non-intelligent controller; the original data refreshing file and the differential data refreshing file both comprise file headers and file contents, and the file headers are used for describing version information and verification information of the file contents.
5. The in-vehicle internet gateway of claim 4, wherein the file parsing module is further configured to: storing the four types of files in a local embedded multimedia memory of the vehicle, keeping encryption on all the four types of files in a full life cycle, and storing the encrypted information in the microprocessor and the microcontroller in a crossed manner to realize mutual verification; the smart controller client or the microcontroller is further configured to: and when the upgrading and refreshing of a certain controller of the vehicle is triggered, dynamically decrypting the four types of files corresponding to the controller and temporarily storing the files, and when the vehicle-mounted internet gateway is powered off, clearing all dynamically decrypted data.
6. The in-vehicle internet gateway of claim 5, wherein the file parsing module is further configured to: configuring different encryption and verification modes for the four types of files during each refreshing, wherein the controller refreshing configuration file converted during each refreshing comprises corresponding module division information of the intelligent controller or the non-intelligent controller; the smart controller client module is further configured to: and performing module-level upgrade and refresh on the module needing upgrade and refresh in the intelligent controller according to the software version of each module of the intelligent controller updated and refreshed in the previous time and the four files converted from the first upgrade and refresh data in the upgrade package of the current time by the file analysis module.
7. The in-vehicle interconnection gateway of claim 3, wherein the controller refresh configuration file includes a number of attempts to upgrade a refresh; the smart controller client module is further configured to: when upgrading and refreshing one intelligent controller fails, restarting a refreshing process of the intelligent controller according to the number of attempts of configuration in the controller refreshing configuration file corresponding to the intelligent controller, and further attempting to refresh the software version of the intelligent controller back to the software version when the upgrading and refreshing are successful last time after all attempts of the number of attempts fail.
8. The in-vehicle interconnection gateway of claim 2, wherein the smart controller client module is further configured to: and acquiring the dependency relationship among the intelligent controllers on the vehicle, determining the refreshing sequence of the intelligent controllers according to the dependency relationship, and upgrading and refreshing the corresponding intelligent controllers according to the refreshing sequence.
9. The vehicle-mounted internet gateway of claim 2, wherein the data parsed from the upgrade package by the file parsing module further includes third upgrade refresh data for performing upgrade refresh on the vehicle-mounted internet gateway; the microprocessor further includes a self-upgrade module configured to upgrade and refresh the microcontroller and the microprocessor itself according to the third upgrade refresh data when the file parsing module parses the third upgrade refresh data from the upgrade package.
10. The vehicular interconnect gateway according to claim 1 or 9, wherein the microprocessor is a dual backup system having a main system and a backup system, the main system is configured to perform upgrade refresh on the intelligent controller on the vehicle, and then perform upgrade refresh on the microcontroller and the backup system; and the backup system is used for upgrading and refreshing the main system of the microprocessor when the vehicle-mounted internet gateway is restarted.
11. The vehicular interconnect gateway of claim 2, wherein the microcontroller comprises:
the communication client module is configured to be in communication connection with the communication server module through a communication bus so as to receive the second upgrading and refreshing data sent by the communication server module and feed back the upgrading and refreshing progress of the non-intelligent controller to the communication server module; and the number of the first and second groups,
and the traditional controller management module is configured to be in communication connection with each non-intelligent controller on the vehicle, upgrade and refresh the corresponding non-intelligent controller according to the second upgrade and refresh data, and feed back the upgrade and refresh progress of the non-intelligent controller to the communication client module.
12. The vehicular interconnect gateway of claim 11, wherein the legacy controller management module comprises:
a legacy controller client unit configured to receive the second upgrade refresh data and obtain related information for verifying and parsing the second upgrade refresh data, and obtain software version information of a non-intelligent controller on the vehicle, and perform upgrade refresh on the non-intelligent controller on the vehicle according to the second upgrade refresh data, and feed back a progress of the upgrade refresh to the communication client module;
the file verification unit is configured to verify the validity of the second upgrade refresh data issued by the file analysis module according to the related information for verifying the second upgrade refresh data acquired by the traditional controller client unit;
a file parsing unit configured to parse the second upgrade refresh data according to the related information for parsing the second upgrade refresh data, acquired by the legacy controller client unit;
the system comprises a refresh flow control unit, a traditional controller client unit and a file analysis unit, wherein the refresh flow control unit is configured to obtain a dependency relationship between non-intelligent controllers on the vehicle through the traditional controller client unit and determine a refresh sequence of the non-intelligent controllers according to the dependency relationship, and the traditional controller client unit is further configured to update and refresh the non-intelligent controllers on the vehicle according to the refresh sequence and data analyzed by the file analysis unit.
13. The in-vehicle interconnect gateway of claim 12, wherein the microcontroller further comprises:
the hardware security module is configured to encrypt data received and sent out by the microcontroller and map and store encrypted information in the first upgrade refresh data and the second upgrade refresh data; and the number of the first and second groups,
and the starting loading module is configured to perform upgrading and refreshing on the microcontroller according to third upgrading and refreshing data when the third upgrading and refreshing data used for performing upgrading and refreshing on the vehicle-mounted internet gateway is analyzed from the upgrading packet by the file analyzing module.
14. The in-vehicle internet gateway of claim 12, wherein the second upgrade refresh data includes module division information of the non-intelligent controller; the legacy controller client unit is further configured to: and performing module-level upgrading and refreshing on the module needing upgrading and refreshing in the non-intelligent controller according to the software version of each module of the non-intelligent controller on the vehicle, which is updated and refreshed last time, and the analysis result of the file analysis unit on the second upgrading and refreshing data in the upgrading package.
15. The vehicle-mounted internet gateway according to claim 12, wherein the analysis result of the file analysis unit on the second upgrade patch data in the upgrade package of this time includes the number of attempts for the upgrade patch; the legacy controller client unit is further configured to: when the upgrading and refreshing of the non-intelligent controller fails, restarting a refreshing process of the non-intelligent controller according to the number of attempts corresponding to the non-intelligent controller, and further attempting to refresh the software version of the non-intelligent controller back to the software version upgraded and refreshed last time after all attempts of the number of attempts fail.
16. The in-vehicle interconnection gateway of claim 12, wherein the legacy controller client unit is further configured to perform parallel upgrade refreshes for a plurality of the non-smart controllers on the vehicle, and to request upgrade refresh data for each of the non-smart controllers from the microprocessor in real-time based on a progress of the upgrade refreshes of the non-smart controllers.
17. A vehicle OTA upgrade system, comprising:
the cloud server is stored with at least one upgrade package;
an intelligent controller and a non-intelligent controller mounted on the vehicle; and the number of the first and second groups,
the vehicular interconnect gateway of any one of claims 1-16, being in communicative connection with the cloud server and each of the smart controllers and the non-smart controllers, respectively.
18. A vehicle OTA upgrading method is characterized by comprising the following steps:
a vehicle-mounted internet gateway establishes communication connection with a cloud end to receive an upgrade package issued by the cloud end;
the vehicle-mounted interconnection gateway analyzes upgrade refresh data used for upgrading and refreshing each controller on a vehicle from the upgrade package, wherein the controller comprises an intelligent controller and a non-intelligent controller, and the upgrade refresh data comprises first upgrade refresh data used for upgrading and refreshing the intelligent controller and second upgrade refresh data used for upgrading and refreshing the non-intelligent controller;
and the vehicle-mounted interconnection gateway upgrades and refreshes the intelligent controller on the vehicle according to the first upgrade and refresh data, and triggers a process of upgrading and refreshing the non-intelligent controller on the vehicle when the second upgrade and refresh data is analyzed, so that the non-intelligent controller on the vehicle is upgraded and refreshed according to the analyzed second upgrade and refresh data.
19. The vehicle OTA upgrade method according to claim 18, wherein the step of the onboard Internet gateway upgrading and refreshing a certain controller on the vehicle comprises:
reading a software version of the controller;
judging whether the local vehicle has a backup package corresponding to the software version, if so, downloading the upgrade package from the cloud, and if not, requesting to download the backup package from the cloud;
after the upgrade package is downloaded, judging whether the current environmental condition of the controller meets a refreshing condition, if not, ending exit, if so, triggering a process of upgrading and refreshing the intelligent controller and/or the non-intelligent controller, upgrading and refreshing the controller according to upgrade and refresh data corresponding to the controller analyzed from the upgrade package, when the upgrade and refresh of the current time fails, restarting the process according to trial times configured in the upgrade and refresh data, and when the trial times are all tried but the upgrade and refresh of the controller still fails, further trying to refresh the software version of the controller back to the software version upgraded and refreshed last time.
20. The vehicle OTA upgrade method of claim 18 further comprising: and when the vehicle-mounted interconnection gateway finishes upgrading and refreshing all the intelligent controllers and the non-intelligent controllers on the vehicle according to the first upgrading and refreshing data and the second upgrading and refreshing data, judging whether the upgrading and refreshing data analyzed from the upgrading packet has third upgrading and refreshing data used for upgrading and refreshing the vehicle-mounted interconnection gateway, and when the upgrading and refreshing data are not updated, performing self-refreshing according to the third upgrading and refreshing data.
21. The vehicle OTA upgrade method of claim 18 further comprising: before upgrading and refreshing the intelligent controller and the non-intelligent controller on the vehicle, the vehicle-mounted interconnection gateway converts first upgrading and refreshing data and second upgrading and refreshing data analyzed from the upgrading packet into a uniform file format.
22. The vehicle OTA upgrade method of claim 21 wherein the unified file format comprises: the OTA refreshing method comprises four types of files, namely an upgrade package configuration file for describing the requirement of OTA refreshing on the vehicle, a controller refreshing configuration file for describing refreshing information of each controller on the vehicle, an original data refreshing file for refreshing each controller and a differential data refreshing file; the upgrading package configuration file comprises the number of controllers needing to be refreshed on the vehicle, basic refreshing information and verification information of the whole refreshing package; the controller refreshing configuration file comprises the number of files to be refreshed, an address range, safety algorithm information and verification method information of a certain controller; the original data refreshing file and the differential data refreshing file both comprise file headers and file contents, and the file headers are used for describing version information and verification information of the file contents.
23. The vehicle OTA upgrade method according to claim 22, wherein the vehicle-mounted Internet gateway configures the four types of files using different encryption and verification methods, and during upgrade and refresh of an intelligent controller and a non-intelligent controller on the vehicle, stores the four types of files in a local embedded multimedia memory of the vehicle, keeps encrypting all the four types of files for a full life cycle, and internally stores the encrypted information in a cross manner and realizes mutual verification; when the upgrading and refreshing process of a certain controller of the vehicle is triggered, the four types of files corresponding to the controller are dynamically decrypted and temporarily stored, and when power failure occurs, all dynamically decrypted data are automatically cleared.
24. The vehicle OTA upgrade method according to claim 18, wherein the vehicle-mounted Internet gateway determines a dependency relationship between the controllers on the vehicle and formulates a set of dependency algorithms to determine a refresh sequence between the controllers having a dependency relationship before performing upgrade refresh on the intelligent controllers and the non-intelligent controllers on the vehicle, performs upgrade refresh on the controllers having a dependency relationship according to the refresh sequence, and performs parallel refresh on the controllers insensitive to the refresh sequence.
25. The vehicle OTA upgrading method according to claim 18, wherein when there is a bus fault or signal interference or a certain controller on the vehicle is incompatible with its upgraded and refreshed version during the upgrading and refreshing of the intelligent controller and the non-intelligent controller on the vehicle, the vehicle internet gateway restarts the refresh process of the controller according to the number of attempts configured in the upgrade and refresh data corresponding to the controller, and attempts to refresh the software version of the controller back to the version that was upgraded and refreshed last time when all attempts fail.
26. The vehicle OTA upgrade method according to claim 18, wherein the vehicle Internet gateway performs module level upgrade refresh on a certain controller on the vehicle according to a module division of the controller.
27. A computer storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the vehicle OTA upgrade method of any of claims 18 to 26.
28. A vehicle, characterized by comprising:
a plurality of controllers including an intelligent controller and a non-intelligent controller; and the number of the first and second groups,
the vehicular interconnect gateway of any one of claims 1-16, interacting with a cloud and communicatively coupled to each of the controllers.
CN201811627066.8A 2018-12-28 2018-12-28 Vehicle-mounted interconnection gateway, vehicle OTA upgrading system and method, and computer storage medium Active CN111385191B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201811627066.8A CN111385191B (en) 2018-12-28 2018-12-28 Vehicle-mounted interconnection gateway, vehicle OTA upgrading system and method, and computer storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201811627066.8A CN111385191B (en) 2018-12-28 2018-12-28 Vehicle-mounted interconnection gateway, vehicle OTA upgrading system and method, and computer storage medium

Publications (2)

Publication Number Publication Date
CN111385191A true CN111385191A (en) 2020-07-07
CN111385191B CN111385191B (en) 2022-03-15

Family

ID=71219256

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201811627066.8A Active CN111385191B (en) 2018-12-28 2018-12-28 Vehicle-mounted interconnection gateway, vehicle OTA upgrading system and method, and computer storage medium

Country Status (1)

Country Link
CN (1) CN111385191B (en)

Cited By (44)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111917842A (en) * 2020-07-16 2020-11-10 无锡华普微电子有限公司 OTA (over the air) upgrading method and system for automobile instrument and automobile instrument system
CN111930407A (en) * 2020-10-19 2020-11-13 广州汽车集团股份有限公司 Vehicle ECU software upgrading method and system, vehicle TBOX microcontroller and SOC terminal
CN112019614A (en) * 2020-08-25 2020-12-01 苏州挚途科技有限公司 Method, system and processor for communication and communication synchronization between two systems
CN112015489A (en) * 2020-09-18 2020-12-01 华人运通(江苏)技术有限公司 Management method, device, storage medium and system for vehicle-mounted software
CN112073500A (en) * 2020-08-31 2020-12-11 安徽江淮汽车集团股份有限公司 Vehicle controller upgrading method, device, storage medium and device
CN112104736A (en) * 2020-09-17 2020-12-18 广州汽车集团股份有限公司 OTA-based multi-ECU upgrading method
CN112114832A (en) * 2020-09-21 2020-12-22 华人运通(上海)云计算科技有限公司 Vehicle upgrade control method, terminal device, vehicle, and computer storage medium
CN112148312A (en) * 2020-09-15 2020-12-29 中国第一汽车股份有限公司 Firmware upgrading management method, device, equipment and medium for electronic controller
CN112256303A (en) * 2020-10-23 2021-01-22 安徽中科美络信息技术有限公司 Firmware updating method and system for vehicle-mounted intelligent terminal
CN112256315A (en) * 2020-10-16 2021-01-22 中国第一汽车股份有限公司 Upgrading method, device, equipment and storage medium
CN112399378A (en) * 2020-10-13 2021-02-23 联通智网科技有限公司 Internet of vehicles-based over-the-air downloading method, system, equipment and medium
CN112559003A (en) * 2020-11-17 2021-03-26 东风汽车集团有限公司 Domain controller software upgrading method and device and domain controller
CN112612490A (en) * 2020-12-17 2021-04-06 华人运通(上海)云计算科技有限公司 Vehicle upgrading method, vehicle and storage medium
CN112732303A (en) * 2021-01-12 2021-04-30 武汉光庭信息技术股份有限公司 Vehicle-mounted instrument content upgrading display method and system, electronic equipment and storage medium
CN112953775A (en) * 2021-02-25 2021-06-11 湖北亿咖通科技有限公司 Vehicle machine upgrading system and method
CN113010191A (en) * 2021-03-31 2021-06-22 东风商用车有限公司 Integrated vehicle ECU flashing method and system
CN113064626A (en) * 2021-03-22 2021-07-02 厦门市车泊易交通设备有限公司 Remote upgrade detection method for roadside parking equipment
CN113204358A (en) * 2021-03-25 2021-08-03 联合汽车电子有限公司 Software package refreshing service method, service system and readable storage medium
CN113411777A (en) * 2021-06-02 2021-09-17 辉创电子科技(苏州)有限公司 Vehicle-mounted high-definition camera OTA upgrading method, process and equipment
CN113434169A (en) * 2021-06-22 2021-09-24 重庆长安汽车股份有限公司 Method and system for generating air upgrading parallel task group based on dependency relationship
CN113448604A (en) * 2021-05-28 2021-09-28 江铃汽车股份有限公司 OTA (over the air) flashing method, OTA flashing system, readable storage medium and vehicle
CN113472884A (en) * 2021-06-30 2021-10-01 潍柴动力股份有限公司 OTA (over the air) upgrading method and device
CN113472865A (en) * 2021-06-21 2021-10-01 上汽通用五菱汽车股份有限公司 Vehicle controller access method, access controller, vehicle and readable storage medium
CN113495735A (en) * 2021-06-30 2021-10-12 东风商用车有限公司 Upgrade package installation method, device, equipment and readable storage medium
CN113515247A (en) * 2021-05-19 2021-10-19 宝能(广州)汽车研究院有限公司 Upgrade progress display method, device, equipment and medium
CN113568635A (en) * 2021-07-06 2021-10-29 青岛中科英泰商用系统股份有限公司 Automatic upgrading system and method for intelligent stamping machine
CN113590164A (en) * 2021-08-31 2021-11-02 重庆长安汽车股份有限公司 Method and system for upgrading vehicle control unit software
CN113590159A (en) * 2021-08-03 2021-11-02 深圳丰汇汽车电子有限公司 Vehicle-mounted traveling computer parallel upgrading method and system
CN113849212A (en) * 2021-09-30 2021-12-28 蜂巢能源科技有限公司 Software upgrading control method and device and electronic equipment
CN113905061A (en) * 2021-07-30 2022-01-07 联合汽车电子有限公司 Information processing method, device, chip, diagnostic instrument, equipment and vehicle
CN114253185A (en) * 2021-12-03 2022-03-29 深圳元戎启行科技有限公司 Vehicle configuration method and device, vehicle-mounted control system and unmanned vehicle
CN114265613A (en) * 2021-12-21 2022-04-01 红石阳光（北京）科技股份有限公司 Method and system for differentially upgrading firmware of all electric control units of whole vehicle
CN114338290A (en) * 2022-01-07 2022-04-12 南昌济铃新能源科技有限责任公司 Vehicle-mounted Ethernet gateway system
CN114531354A (en) * 2022-04-22 2022-05-24 北京金山云网络技术有限公司 Cluster upgrading method and device, cluster controller and server
CN114884814A (en) * 2022-06-21 2022-08-09 奥特酷智能科技(南京)有限公司 TSN dynamic configuration management method and system
CN114924803A (en) * 2022-06-16 2022-08-19 Oppo广东移动通信有限公司 Loading starting method, chip, electronic device and storage medium
CN115220750A (en) * 2021-11-25 2022-10-21 广州汽车集团股份有限公司 Automobile OTA (over the air) upgrading method, front-row host and system
CN115277415A (en) * 2022-07-27 2022-11-01 大陆汽车研发（重庆）有限公司 LIN bus slave node online upgrading method and vehicle using same
CN115412436A (en) * 2022-08-30 2022-11-29 重庆长安新能源汽车科技有限公司 Vehicle window switch upgrading method and device, electronic equipment and storage medium
WO2023065154A1 (en) * 2021-10-20 2023-04-27 Telefonaktiebolaget Lm Ericsson (Publ) Method and apparatus for vehicle application
WO2023168746A1 (en) * 2022-03-07 2023-09-14 深圳市德驰微视技术有限公司 Usb upgrading method and device of arm linux operating system based on domain controller platform
CN116841578A (en) * 2023-05-19 2023-10-03 国汽朴津智能科技(安庆)有限公司 Remote upgrading method and system for mobile robot
CN116996328A (en) * 2023-09-26 2023-11-03 成都骁博锐电子科技有限责任公司 New energy automobile network security gateway system
CN113849212B (en) * 2021-09-30 2024-05-14 蜂巢能源科技有限公司 Software upgrading control method and device and electronic equipment

Citations (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7926091B2 (en) * 2007-11-27 2011-04-12 GM Global Technology Operations LLC Secure over-the-air modification of automotive vehicular options
CN201804268U (en) * 2010-10-09 2011-04-20 武汉凌久信息技术有限公司 Peripheral controller of vehicle internet base station
CN102768530A (en) * 2012-08-14 2012-11-07 山东省科学院自动化研究所 Function and parameter on-line configuration method of automobile integrated automobile body electronic control unit
CN203870408U (en) * 2014-05-14 2014-10-08 芜湖伯特利电子控制系统有限公司 Vehicle data acquisition simulation system
CN104572153A (en) * 2013-10-23 2015-04-29 上海汽车集团股份有限公司 Update data conversion method for vehicle updating
US20160113043A1 (en) * 2014-10-15 2016-04-21 Lear Corporation Vehicle Gateway Module Configured to Provide Wireless Hotspot
CN105933150A (en) * 2016-04-20 2016-09-07 努比亚技术有限公司 OTA upgrade method, device and system
CN106603578A (en) * 2017-02-15 2017-04-26 北京航空航天大学 Centralized T-BOX information safety protection system
CN107415632A (en) * 2017-06-29 2017-12-01 上海思致汽车工程技术有限公司 A kind of system and its computational methods for being used to calculate air-conditioning filter cleaner service life
CN107450518A (en) * 2017-08-16 2017-12-08 北京车和家信息技术有限责任公司 A kind of program upgrade apparatus and its control method based on vehicle-mounted Ethernet framework
CN107561969A (en) * 2016-07-01 2018-01-09 三星电子株式会社 Apparatus and method for vehicle platform
CN107707418A (en) * 2016-08-09 2018-02-16 上汽通用汽车有限公司 One kind communication diagnostic system and communication diagnosis method for refreshing
US20180232223A1 (en) * 2017-02-16 2018-08-16 Ford Global Technologies, Llc Method and apparatus for multi cycle vehicle software update compliance handling
CN108454538A (en) * 2017-02-17 2018-08-28 联合汽车电子有限公司 Vehicle Electronic Control Unit updating system
CN207926624U (en) * 2018-03-02 2018-09-28 上海擎感智能科技有限公司 Vehicle netbios and automobile
CN108845562A (en) * 2018-06-09 2018-11-20 铠龙东方汽车有限公司 A kind of intelligent vehicle-carried service system based on car networking

Patent Citations (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7926091B2 (en) * 2007-11-27 2011-04-12 GM Global Technology Operations LLC Secure over-the-air modification of automotive vehicular options
CN201804268U (en) * 2010-10-09 2011-04-20 武汉凌久信息技术有限公司 Peripheral controller of vehicle internet base station
CN102768530A (en) * 2012-08-14 2012-11-07 山东省科学院自动化研究所 Function and parameter on-line configuration method of automobile integrated automobile body electronic control unit
CN104572153A (en) * 2013-10-23 2015-04-29 上海汽车集团股份有限公司 Update data conversion method for vehicle updating
CN203870408U (en) * 2014-05-14 2014-10-08 芜湖伯特利电子控制系统有限公司 Vehicle data acquisition simulation system
US20160113043A1 (en) * 2014-10-15 2016-04-21 Lear Corporation Vehicle Gateway Module Configured to Provide Wireless Hotspot
CN105933150A (en) * 2016-04-20 2016-09-07 努比亚技术有限公司 OTA upgrade method, device and system
CN107561969A (en) * 2016-07-01 2018-01-09 三星电子株式会社 Apparatus and method for vehicle platform
CN107707418A (en) * 2016-08-09 2018-02-16 上汽通用汽车有限公司 One kind communication diagnostic system and communication diagnosis method for refreshing
CN106603578A (en) * 2017-02-15 2017-04-26 北京航空航天大学 Centralized T-BOX information safety protection system
US20180232223A1 (en) * 2017-02-16 2018-08-16 Ford Global Technologies, Llc Method and apparatus for multi cycle vehicle software update compliance handling
CN108454538A (en) * 2017-02-17 2018-08-28 联合汽车电子有限公司 Vehicle Electronic Control Unit updating system
CN107415632A (en) * 2017-06-29 2017-12-01 上海思致汽车工程技术有限公司 A kind of system and its computational methods for being used to calculate air-conditioning filter cleaner service life
CN107450518A (en) * 2017-08-16 2017-12-08 北京车和家信息技术有限责任公司 A kind of program upgrade apparatus and its control method based on vehicle-mounted Ethernet framework
CN207926624U (en) * 2018-03-02 2018-09-28 上海擎感智能科技有限公司 Vehicle netbios and automobile
CN108845562A (en) * 2018-06-09 2018-11-20 铠龙东方汽车有限公司 A kind of intelligent vehicle-carried service system based on car networking

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
陈晓韦等: ""基于CAN总线的车载检测模块固件升级系统设计"", 《电脑知识与技术》 *

Cited By (59)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111917842A (en) * 2020-07-16 2020-11-10 无锡华普微电子有限公司 OTA (over the air) upgrading method and system for automobile instrument and automobile instrument system
CN112019614A (en) * 2020-08-25 2020-12-01 苏州挚途科技有限公司 Method, system and processor for communication and communication synchronization between two systems
CN112019614B (en) * 2020-08-25 2023-02-17 苏州挚途科技有限公司 Method, system and processor for communication and communication synchronization between two systems
CN112073500A (en) * 2020-08-31 2020-12-11 安徽江淮汽车集团股份有限公司 Vehicle controller upgrading method, device, storage medium and device
CN112148312A (en) * 2020-09-15 2020-12-29 中国第一汽车股份有限公司 Firmware upgrading management method, device, equipment and medium for electronic controller
CN112104736A (en) * 2020-09-17 2020-12-18 广州汽车集团股份有限公司 OTA-based multi-ECU upgrading method
CN112104736B (en) * 2020-09-17 2022-07-26 广州汽车集团股份有限公司 OTA-based multi-ECU upgrading method
CN112015489A (en) * 2020-09-18 2020-12-01 华人运通(江苏)技术有限公司 Management method, device, storage medium and system for vehicle-mounted software
CN112114832B (en) * 2020-09-21 2024-03-15 华人运通(上海)云计算科技有限公司 Vehicle upgrade control method, terminal device, vehicle, and computer storage medium
CN112114832A (en) * 2020-09-21 2020-12-22 华人运通(上海)云计算科技有限公司 Vehicle upgrade control method, terminal device, vehicle, and computer storage medium
CN112399378B (en) * 2020-10-13 2021-08-20 联通智网科技股份有限公司 Internet of vehicles-based over-the-air downloading method, system, equipment and medium
CN112399378A (en) * 2020-10-13 2021-02-23 联通智网科技有限公司 Internet of vehicles-based over-the-air downloading method, system, equipment and medium
CN112256315A (en) * 2020-10-16 2021-01-22 中国第一汽车股份有限公司 Upgrading method, device, equipment and storage medium
CN111930407B (en) * 2020-10-19 2021-08-24 广州汽车集团股份有限公司 Vehicle ECU software upgrading method and system, vehicle TBOX microcontroller and SOC terminal
CN111930407A (en) * 2020-10-19 2020-11-13 广州汽车集团股份有限公司 Vehicle ECU software upgrading method and system, vehicle TBOX microcontroller and SOC terminal
CN112256303A (en) * 2020-10-23 2021-01-22 安徽中科美络信息技术有限公司 Firmware updating method and system for vehicle-mounted intelligent terminal
CN112256303B (en) * 2020-10-23 2023-05-16 中科美络科技股份有限公司 Firmware updating method and system of vehicle-mounted intelligent terminal
CN112559003A (en) * 2020-11-17 2021-03-26 东风汽车集团有限公司 Domain controller software upgrading method and device and domain controller
CN112559003B (en) * 2020-11-17 2023-03-03 东风汽车集团有限公司 Domain controller software upgrading method and device and domain controller
CN112612490A (en) * 2020-12-17 2021-04-06 华人运通(上海)云计算科技有限公司 Vehicle upgrading method, vehicle and storage medium
CN112732303A (en) * 2021-01-12 2021-04-30 武汉光庭信息技术股份有限公司 Vehicle-mounted instrument content upgrading display method and system, electronic equipment and storage medium
CN112953775A (en) * 2021-02-25 2021-06-11 湖北亿咖通科技有限公司 Vehicle machine upgrading system and method
CN113064626A (en) * 2021-03-22 2021-07-02 厦门市车泊易交通设备有限公司 Remote upgrade detection method for roadside parking equipment
CN113204358A (en) * 2021-03-25 2021-08-03 联合汽车电子有限公司 Software package refreshing service method, service system and readable storage medium
CN113010191A (en) * 2021-03-31 2021-06-22 东风商用车有限公司 Integrated vehicle ECU flashing method and system
CN113515247A (en) * 2021-05-19 2021-10-19 宝能(广州)汽车研究院有限公司 Upgrade progress display method, device, equipment and medium
CN113448604A (en) * 2021-05-28 2021-09-28 江铃汽车股份有限公司 OTA (over the air) flashing method, OTA flashing system, readable storage medium and vehicle
CN113411777A (en) * 2021-06-02 2021-09-17 辉创电子科技(苏州)有限公司 Vehicle-mounted high-definition camera OTA upgrading method, process and equipment
CN113472865A (en) * 2021-06-21 2021-10-01 上汽通用五菱汽车股份有限公司 Vehicle controller access method, access controller, vehicle and readable storage medium
CN113434169A (en) * 2021-06-22 2021-09-24 重庆长安汽车股份有限公司 Method and system for generating air upgrading parallel task group based on dependency relationship
CN113472884A (en) * 2021-06-30 2021-10-01 潍柴动力股份有限公司 OTA (over the air) upgrading method and device
CN113495735A (en) * 2021-06-30 2021-10-12 东风商用车有限公司 Upgrade package installation method, device, equipment and readable storage medium
CN113568635A (en) * 2021-07-06 2021-10-29 青岛中科英泰商用系统股份有限公司 Automatic upgrading system and method for intelligent stamping machine
CN113905061A (en) * 2021-07-30 2022-01-07 联合汽车电子有限公司 Information processing method, device, chip, diagnostic instrument, equipment and vehicle
CN113590159A (en) * 2021-08-03 2021-11-02 深圳丰汇汽车电子有限公司 Vehicle-mounted traveling computer parallel upgrading method and system
CN113590159B (en) * 2021-08-03 2024-04-16 深圳丰汇汽车电子有限公司 Parallel upgrading method and system for vehicle-mounted traveling crane computers
CN113590164B (en) * 2021-08-31 2024-03-22 重庆长安汽车股份有限公司 Method and system for upgrading software of whole vehicle controller
CN113590164A (en) * 2021-08-31 2021-11-02 重庆长安汽车股份有限公司 Method and system for upgrading vehicle control unit software
CN113849212B (en) * 2021-09-30 2024-05-14 蜂巢能源科技有限公司 Software upgrading control method and device and electronic equipment
CN113849212A (en) * 2021-09-30 2021-12-28 蜂巢能源科技有限公司 Software upgrading control method and device and electronic equipment
WO2023065154A1 (en) * 2021-10-20 2023-04-27 Telefonaktiebolaget Lm Ericsson (Publ) Method and apparatus for vehicle application
CN115220750A (en) * 2021-11-25 2022-10-21 广州汽车集团股份有限公司 Automobile OTA (over the air) upgrading method, front-row host and system
CN115220750B (en) * 2021-11-25 2024-03-15 广州汽车集团股份有限公司 Automobile OTA upgrading method, front-row host and system
CN114253185A (en) * 2021-12-03 2022-03-29 深圳元戎启行科技有限公司 Vehicle configuration method and device, vehicle-mounted control system and unmanned vehicle
CN114265613B (en) * 2021-12-21 2022-06-28 红石阳光（北京）科技股份有限公司 Method and system for differentially upgrading firmware of all electric control units of whole vehicle
CN114265613A (en) * 2021-12-21 2022-04-01 红石阳光（北京）科技股份有限公司 Method and system for differentially upgrading firmware of all electric control units of whole vehicle
CN114338290A (en) * 2022-01-07 2022-04-12 南昌济铃新能源科技有限责任公司 Vehicle-mounted Ethernet gateway system
WO2023168746A1 (en) * 2022-03-07 2023-09-14 深圳市德驰微视技术有限公司 Usb upgrading method and device of arm linux operating system based on domain controller platform
CN114531354A (en) * 2022-04-22 2022-05-24 北京金山云网络技术有限公司 Cluster upgrading method and device, cluster controller and server
CN114531354B (en) * 2022-04-22 2022-08-23 北京金山云网络技术有限公司 Cluster upgrading method and device, cluster controller and server
CN114924803A (en) * 2022-06-16 2022-08-19 Oppo广东移动通信有限公司 Loading starting method, chip, electronic device and storage medium
CN114884814A (en) * 2022-06-21 2022-08-09 奥特酷智能科技(南京)有限公司 TSN dynamic configuration management method and system
CN114884814B (en) * 2022-06-21 2023-06-02 奥特酷智能科技(南京)有限公司 TSN dynamic configuration management method and system
CN115277415A (en) * 2022-07-27 2022-11-01 大陆汽车研发（重庆）有限公司 LIN bus slave node online upgrading method and vehicle using same
CN115412436A (en) * 2022-08-30 2022-11-29 重庆长安新能源汽车科技有限公司 Vehicle window switch upgrading method and device, electronic equipment and storage medium
CN116841578A (en) * 2023-05-19 2023-10-03 国汽朴津智能科技(安庆)有限公司 Remote upgrading method and system for mobile robot
CN116841578B (en) * 2023-05-19 2024-03-26 国汽朴津智能科技(安庆)有限公司 Remote upgrading method and system for mobile robot
CN116996328A (en) * 2023-09-26 2023-11-03 成都骁博锐电子科技有限责任公司 New energy automobile network security gateway system
CN116996328B (en) * 2023-09-26 2023-12-01 成都骁博锐电子科技有限责任公司 New energy automobile network security gateway system

Also Published As

Publication number Publication date
CN111385191B (en) 2022-03-15

Similar Documents

Publication Publication Date Title
CN111385191B (en) Vehicle-mounted interconnection gateway, vehicle OTA upgrading system and method, and computer storage medium
US10599420B2 (en) Updating a controller unit in a vehicle
US11822917B2 (en) Detecting anomalies online using controller processing activity
US10637657B2 (en) Update management method, update management system, and non-transitory recording medium
US9916151B2 (en) Multiple-stage secure vehicle software updating
CN111061499A (en) ECU updating method and system based on file system
CN112463190A (en) Vehicle upgrading method and device
EP3405923B1 (en) Updating a controller unit in a vehicle
JP2023518402A (en) Certificate list update method and device
DE102022122167A1 (en) PROCEDURE FOR REAL-TIME ECU CRASH REPORTING AND RECOVERY
Falco et al. Assuring automotive data and software integrity employing distributed hash tables and blockchain
DE102022122064A1 (en) SYSTEM AND METHOD FOR IMPROVED ECU FAILURE DETECTION IN FLEET
US20220284743A1 (en) Center device and in-vehicle electronic control device
CN117435220A (en) OTA upgrading method and device based on programming mode, electronic equipment and storage medium
DE102022122162A1 (en) EMBEDDED SYSTEM TIME RECORDING IN AUTOMOBILES
DE102022120276A1 (en) EXCHANGE OF VOLATILE KEYS BETWEEN VEHICLE SOFTWARE NODES
DE102022122159A1 (en) IMPROVED TARGETED COMPONENT TESTING
DE102022122188A1 (en) SYSTEM AND METHOD TO ENABLE PERSISTENT VEHICLE SOFTWARE INTERFACES
DE102022122160A1 (en) E2E SYNCHRONIZATION
CN115904434A (en) Method for improving diagnosis updating frequency of ECU

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant